You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
fix: upgrade json to 2.21.2 to remediate CVE-2026-71847 (CVSS 8.7 High)
Bumps json gem from 2.20.0 to 2.21.2 to fix a Use After Free vulnerability
(CWE-416) in JSON::ResumableParser#partial_value. Bumps SDK version to 0.10.1.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Copy file name to clipboardExpand all lines: CHANGELOG.md
+7Lines changed: 7 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,5 +1,12 @@
1
1
## CHANGELOG
2
2
3
+
## Version 0.10.1
4
+
### Date: 13th-August-2026
5
+
### Security
6
+
- Upgraded `json` dependency from `2.20.0` to `2.21.2` to remediate CVE-2026-71847 (SNYK-RUBY-JSON-18599450) — Use After Free (CWE-416) in `JSON::ResumableParser#partial_value`, CVSS 8.7 High.
0 commit comments