7A6163

**Name of the Vulnerable Software and Affected Versions** Oj versions prior to 3.17.3 **Description** When parsing a JSON object with a key of 254 bytes or longer, the `Oj.load` function in `:object` mode reads uninitialized stack memory. For keys 256 bytes or longer, the process also performs an out-of-bounds read. This occurs because the `form attr()` function in `ext/oj/intern.c` incorrectly passes an uninitialized stack buffer `buf` instead of the correctly populated heap buffer `b` to the `rb intern3()` function. The leaked memory can be disclosed to the caller through the produced Symbol or via an `EncodingError` message triggered by invalid UTF-8 sequences, potentially exposing process stack contents. **Recommendations** Update to version 3.17.3. Avoid using `Oj.load` in `:object` mode when parsing untrusted input.

**Name of the Vulnerable Software and Affected Versions** Oj versions prior to 3.17.3 **Description** When `Oj::Doc#each child` is invoked recursively over a deeply nested JSON document, it can cause a fixed-size stack buffer overflow, leading to a denial of service (DoS) that aborts the process. This occurs due to a two-step chain in `ext/oj/fast.c` where the `doc each child()` function increments the `doc->where` variable beyond the `where path` array without a bounds check and fails to restore it. Consequently, subsequent recursive calls cause a `memcpy` operation to overflow the `save path` stack-local buffer. This is possible because the `Oj::Doc` parser does not impose a JSON nesting-depth limit. **Recommendations** Update to version 3.17.3.

**Name of the Vulnerable Software and Affected Versions** Shaarli version 0.12.2 **Description** The issue is a Reflected Cross Site Scripting (XSS) vulnerability, which allows remote attackers to execute arbitrary code via the search tag function. This means an attacker can inject malicious code into the search function, potentially leading to unauthorized actions on the affected system. **Recommendations** For Shaarli version 0.12.2, consider disabling the search tag function until a patch is available to prevent exploitation of the Reflected Cross Site Scripting (XSS) vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microbin version 1.2.0 **Description** A cross-site scripting vulnerability in the component microbin/src/pasta.rs of Microbin allows attackers to execute arbitrary web scripts or HTML via a crafted payload. **Recommendations** For Microbin version 1.2.0, consider disabling access to the microbin/src/pasta.rs component until a patch is available. Restrict the execution of arbitrary web scripts or HTML to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.