Ruby on Rails - JSON Processor YAML Deserialization Code Execution (Metasploit)

Ruby on Rails - JSON Processor YAML Deserialization Code Execution (Metasploit)

Published 8 Sep 2026Updated 8 Sep 20263 sources
CVSS 7.5 ✓ VERIFIED REFERENCE

Source timeline

Discovered through Exploit-DBView source ↗