CVE:CVE-2020-10663
CNNVD:CNNVD-202003-1294
Ruby JSON gem是一款基于Ruby的用于从文本解析JSON以及从Ruby对象生成JSON文本的软件包。
Ruby JSON gem 2.2.0及之前版本（使用在Ruby 2.4版本至2.4.9版本、2.5版本至2.5.7版本和2.6版本至2.6.5版本）中存在安全漏洞。攻击者可利用该漏洞在目标系统中强制创建任意对象。
solution:Upgrade json_project json to a higher version than 2.2.0,and avoid the version (,2.2.0]; Upgrade fedoraproject fedora to a higher version than 30,31,and avoid the version 30,31; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade debian debian_linux to a higher version than 8.0,10.0,and avoid the version 8.0,10.0; Upgrade apple macos to a higher version than 11.0.1,and avoid the version 11.0.1