ox 2.8.1

1 security vulnerability found in version 2.8.1

ox ruby gem stack overflow in sax_parse

medium severity CVE-2017-16229
medium severity CVE-2017-16229
Patched versions: >= 2.8.2

In the Ox gem 2.8.1 for Ruby, the process crashes with a stack-based buffer over-read in the read_from_str function in sax_buf.c when a crafted input is supplied to sax_parse.

No officially reported memory leakage issues detected.


This gem version does not have any officially reported memory leaked issues.

No license issues detected.


This gem version has a license in the gemspec.

This gem version is available.


This gem version has not been yanked and is still available for usage.