Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.2, Oj.load is vulnerable to heap corruption when parsing a JSON string longer than 2 GB. An integer overflow in buf_append_string (buf.h:61) converts the string length to a large negative size_t, causing memcpy to copy an astronomically large amount of data out of bounds. This crashes the process and can corrupt adjacent heap memory. The issue has been fixed in version 3.17.2.

An update of the rubygem package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to     3.17.2, Oj.load is vulnerable to heap corruption when parsing a JSON string longer than 2 GB. An integer     overflow in buf_append_string (buf.h:61) converts the string length to a large negative size_t, causing     memcpy to copy an astronomically large amount of data out of bounds. This crashes the process and can     corrupt adjacent heap memory. The issue has been fixed in version 3.17.2. (CVE-2026-54903)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to
    3.17.2, Oj.load is vulnerable to heap corruption when parsing a JSON string longer than 2 GB. An integer
    overflow in buf_append_string (buf.h:61) converts the string length to a large negative size_t, causing
    memcpy to copy an astronomically large amount of data out of bounds. This crashes the process and can
    corrupt adjacent heap memory. The issue has been fixed in version 3.17.2. (CVE-2026-54903)

ID	Name	Product	Family	Type	Severity
332369	Photon OS 5.0: Rubygem PHSA-2026-5.0-92-0917	Nessus	PhotonOS Local Security Checks	Local	medium
325969	Photon OS 4.0: Rubygem PHSA-2026-4.0-1052	Nessus	PhotonOS Local Security Checks	Local	high
325967	Photon OS 5.0: Rubygem PHSA-2026-5.0-0917	Nessus	PhotonOS Local Security Checks	Local	medium
324679	Linux Distros Unpatched Vulnerability : CVE-2026-54903	Nessus	Misc.	Local	medium
443622	SCA: security update for oj (GHSA-475m-ph3x-64gp)	Tenable Cloud Security	SCA Checks	Local	medium
443622	SCA: security update for oj (GHSA-475m-ph3x-64gp)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium

Detections

Analytics

CVE-2026-54903

medium

Tenable Plugins

medium

high

medium

medium

medium

medium