json

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. Ruby JSON has a format string injection vulnerabilityCVE-2026-33210ruby · CVSS 9.1 · 0.9% likely

   CWE-134

2. Ruby JSON Parser has Out-of-bounds ReadCVE-2025-27788ruby · CVSS 7.5 · 0.7% likely

   CWE-125

3. Ruby JSON: JSON::ResumableParser#partial_value dereferences a freed input buffer and crashes on truncated duplicate-key streamsCVE-2026-71847ruby · CVSS 8.7 · 0.4% likely

   CWE-416

4. Ruby JSON: JSON generator heap buffer overflow when streaming to an IOCVE-2026-54696ruby · CVSS 3.7 · 0.4% likely

   CWE-122

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.