CVE-2026-54897

Name of the Vulnerable Software and Affected Versions Oj versions prior to 3.17.2

Description Oj::Doc iterators (each value, each child, each leaf) are subject to a heap use-after-free. This occurs when a Ruby block yielded during iteration calls doc.close or d.close, causing the document's heap memory to be freed while the C iterator is still active. Upon returning control from the block, the iterator attempts to read from the freed memory region, making the use-after-free accessible from pure Ruby.

Recommendations Update Oj to version 3.17.2 or later.