Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. Prior to 3.17.2, Oj::Doc iterators (each_value, each_child, each_leaf) were vulnerable to a heap use-after-free. When a Ruby block yielded during iteration calls doc.close or d.close, the document's heap memory is freed while the C iterator is still running. When control returns from the block, the iterator reads from the freed region, producing a use-after-free accessible from pure Ruby. This issue has been fixed in version 3.17.2.

An update of the rubygem package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. Prior to 3.17.2,     Oj::Doc iterators (each_value, each_child, each_leaf) were vulnerable to a heap use-after-free. When a     Ruby block yielded during iteration calls doc.close or d.close, the document's heap memory is freed while     the C iterator is still running. When control returns from the block, the iterator reads from the freed     region, producing a use-after-free accessible from pure Ruby. This issue has been fixed in version 3.17.2.
    (CVE-2026-54897)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. Prior to 3.17.2,
    Oj::Doc iterators (each_value, each_child, each_leaf) were vulnerable to a heap use-after-free. When a
    Ruby block yielded during iteration calls doc.close or d.close, the document's heap memory is freed while
    the C iterator is still running. When control returns from the block, the iterator reads from the freed
    region, producing a use-after-free accessible from pure Ruby. This issue has been fixed in version 3.17.2.
    (CVE-2026-54897)

ID	Name	Product	Family	Type	Severity
332369	Photon OS 5.0: Rubygem PHSA-2026-5.0-92-0917	Nessus	PhotonOS Local Security Checks	Local	medium
325969	Photon OS 4.0: Rubygem PHSA-2026-4.0-1052	Nessus	PhotonOS Local Security Checks	Local	high
325967	Photon OS 5.0: Rubygem PHSA-2026-5.0-0917	Nessus	PhotonOS Local Security Checks	Local	medium
324673	Linux Distros Unpatched Vulnerability : CVE-2026-54897	Nessus	Misc.	Local	low
443712	SCA: security update for oj (GHSA-9ppp-w3g4-fh4q)	Tenable Cloud Security	SCA Checks	Local	low
443712	SCA: security update for oj (GHSA-9ppp-w3g4-fh4q)	Tenable Self-Hosted Container Security	SCA Checks	Local	low

Detections

Analytics

CVE-2026-54897

low

Tenable Plugins

medium

high

medium

low

low

low