ox
Ruby Optimized XML Parser
View on Github
Activity
- Latest release
- 1mo ago
- Total releases
- 164
- Cadence
- ~27 days
- Last 12 months
- 6
Reach
- Downloads
- 39.5M
- Stars
- 913
Details
- License
- MIT
- First release
- Jun 30, 2011
| Version | Released | |
|---|---|---|
2.14.29
patch
| ||
2.14.28
patch
| ||
2.14.27
patch
| ||
2.14.26
patch
| ||
2.14.25
patch
| ||
2.14.24
patch
| ||
2.14.23
patch
| ||
2.14.22
patch
| ||
2.14.21
patch
| ||
2.14.20
patch
| ||
2.14.19
patch
| ||
2.14.18
patch
| ||
2.14.17
patch
| ||
2.14.16
patch
| ||
2.14.15
patch
| ||
2.14.14
patch
| ||
2.14.13
patch
| ||
2.14.12
patch
| ||
2.14.11
patch
| ||
2.14.10
patch
| ||
2.14.9
patch
| ||
2.14.8
patch
| ||
2.14.7
patch
| ||
2.14.6
patch
| ||
2.14.5
patch
| ||
2.14.4
patch
| ||
2.14.3
patch
| ||
2.14.2
patch
| ||
2.14.1
patch
| ||
2.14.0
minor
| ||
2.13.4
patch
| ||
2.13.3
patch
| ||
2.13.2
patch
| ||
2.13.1
minor
| ||
2.12.1
patch
| ||
2.12.0
minor
| ||
2.11.0
minor
| ||
2.10.1
patch
| ||
2.10.0
minor
| ||
2.9.4
patch
| ||
2.9.3
patch
| ||
2.9.2
patch
| ||
2.9.1
patch
| ||
2.9.0
minor
| ||
2.8.4
patch
| ||
2.8.3
patch
| ||
2.8.2
patch
| ||
2.8.1
patch
1 CVE
CVE-2017-16229
GHSA-wfwm-chj7-w59r
Mar 05, 2018
Ox gem stack overflow in sax_parse
5.5
/ 10
Medium
Local
Low
None
Required
Unchanged
None
None
High
In the Ox gem 2.8.1 for Ruby, the process crashes with a stack-based buffer over-read in the Affected versions
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.2.0
1.2.1
1.2.10
1.2.11
1.2.12
1.2.13
+ 105 more Show less
1.2.14
1.2.15
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
1.6.8
1.6.9
1.7.0
1.7.1
1.8.0
1.8.1
1.8.2
1.8.3
1.8.4
1.8.5
1.8.6
1.8.7
1.8.8
1.8.9
1.9.0
1.9.1
1.9.2
1.9.3
1.9.4
2.0.0
2.0.1
2.0.11
2.0.12
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.3.0
2.4.0
2.4.1
2.4.11
2.4.12
2.4.13
2.4.2
2.4.3
2.4.4
2.4.5
2.4.6
2.4.7
2.4.8
2.4.9
2.5.0
2.6.0
2.7.0
2.8.0
2.8.1
Fixed in
2.8.2
References Updated Feb 16, 2024 · Source: OSV.dev | ||
2.8.0
minor
2 CVEs
CVE-2017-16229
GHSA-wfwm-chj7-w59r
Mar 05, 2018
Ox gem stack overflow in sax_parse
5.5
/ 10
Medium
Local
Low
None
Required
Unchanged
None
None
High
In the Ox gem 2.8.1 for Ruby, the process crashes with a stack-based buffer over-read in the Affected versions
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.2.0
1.2.1
1.2.10
1.2.11
1.2.12
1.2.13
+ 105 more Show less
1.2.14
1.2.15
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
1.6.8
1.6.9
1.7.0
1.7.1
1.8.0
1.8.1
1.8.2
1.8.3
1.8.4
1.8.5
1.8.6
1.8.7
1.8.8
1.8.9
1.9.0
1.9.1
1.9.2
1.9.3
1.9.4
2.0.0
2.0.1
2.0.11
2.0.12
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.3.0
2.4.0
2.4.1
2.4.11
2.4.12
2.4.13
2.4.2
2.4.3
2.4.4
2.4.5
2.4.6
2.4.7
2.4.8
2.4.9
2.5.0
2.6.0
2.7.0
2.8.0
2.8.1
Fixed in
2.8.2
References Updated Feb 16, 2024 · Source: OSV.dev
CVE-2017-15928
GHSA-pjj4-w39g-pw54
Nov 21, 2017
Ox gem crashes due to a crafted input
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to Affected versions
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.2.0
1.2.1
1.2.10
1.2.11
1.2.12
1.2.13
+ 104 more Show less
1.2.14
1.2.15
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
1.6.8
1.6.9
1.7.0
1.7.1
1.8.0
1.8.1
1.8.2
1.8.3
1.8.4
1.8.5
1.8.6
1.8.7
1.8.8
1.8.9
1.9.0
1.9.1
1.9.2
1.9.3
1.9.4
2.0.0
2.0.1
2.0.11
2.0.12
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.3.0
2.4.0
2.4.1
2.4.11
2.4.12
2.4.13
2.4.2
2.4.3
2.4.4
2.4.5
2.4.6
2.4.7
2.4.8
2.4.9
2.5.0
2.6.0
2.7.0
2.8.0
Fixed in
2.8.1
References Updated Feb 16, 2024 · Source: OSV.dev | ||
2.7.0
minor
2 CVEs
CVE-2017-16229
GHSA-wfwm-chj7-w59r
Mar 05, 2018
Ox gem stack overflow in sax_parse
5.5
/ 10
Medium
Local
Low
None
Required
Unchanged
None
None
High
In the Ox gem 2.8.1 for Ruby, the process crashes with a stack-based buffer over-read in the Affected versions
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.2.0
1.2.1
1.2.10
1.2.11
1.2.12
1.2.13
+ 105 more Show less
1.2.14
1.2.15
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
1.6.8
1.6.9
1.7.0
1.7.1
1.8.0
1.8.1
1.8.2
1.8.3
1.8.4
1.8.5
1.8.6
1.8.7
1.8.8
1.8.9
1.9.0
1.9.1
1.9.2
1.9.3
1.9.4
2.0.0
2.0.1
2.0.11
2.0.12
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.3.0
2.4.0
2.4.1
2.4.11
2.4.12
2.4.13
2.4.2
2.4.3
2.4.4
2.4.5
2.4.6
2.4.7
2.4.8
2.4.9
2.5.0
2.6.0
2.7.0
2.8.0
2.8.1
Fixed in
2.8.2
References Updated Feb 16, 2024 · Source: OSV.dev
CVE-2017-15928
GHSA-pjj4-w39g-pw54
Nov 21, 2017
Ox gem crashes due to a crafted input
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to Affected versions
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.2.0
1.2.1
1.2.10
1.2.11
1.2.12
1.2.13
+ 104 more Show less
1.2.14
1.2.15
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
1.6.8
1.6.9
1.7.0
1.7.1
1.8.0
1.8.1
1.8.2
1.8.3
1.8.4
1.8.5
1.8.6
1.8.7
1.8.8
1.8.9
1.9.0
1.9.1
1.9.2
1.9.3
1.9.4
2.0.0
2.0.1
2.0.11
2.0.12
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.3.0
2.4.0
2.4.1
2.4.11
2.4.12
2.4.13
2.4.2
2.4.3
2.4.4
2.4.5
2.4.6
2.4.7
2.4.8
2.4.9
2.5.0
2.6.0
2.7.0
2.8.0
Fixed in
2.8.1
References Updated Feb 16, 2024 · Source: OSV.dev |