CVE-2020-10663: Improper Input Validation

April 28, 2020 (updated September 22, 2021)

The JSON gem has an Unsafe Object Creation Vulnerability. Specifically, use of JSON parsing methods can lead to creation of a malicious object within the interpreter, with adverse effects that are application-dependent.

References

nvd.nist.gov/vuln/detail/CVE-2020-10663
www.ruby-lang.org/en/news/2020/03/19/json-dos-cve-2020-10663/

Code Behaviors & Features

Detect and mitigate CVE-2020-10663 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →