Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
heroku-CVE-2013-0269 — Inspect all of your Heroku apps for vulnerable versions of the JSON gem | Kitploit
Tools/GitHubGitHub/heroku/heroku-cve-2013-0269
Vulnerability ScannersCloud SecurityDevSecOpsSupply Chain SecurityMisconfiguration
GitHubheroku/heroku-cve-2013-0269

heroku-CVE-2013-0269

Inspect all of your Heroku apps for vulnerable versions of the JSON gem

View Repository
212 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

heroku-CVE-2013-0269

Inspect all of your heroku apps to see if they are running a vulnerable version of JSON

Background

A security vulnerability has been found in the Ruby JSON gem. This is the root cause for the recently-announced MySQL injection issue in Rails. A new release of the JSON gem is available.

Developers can get a full list of all your affected Heroku applications by running this script. The following JSON versions have been patched and deemed safe from this exploit:

  • 1.7.7
  • 1.6.8
  • 1.5.5

If you do not upgrade, an attacker may be able to execute arbitrary SQL queries on your application's MySQL database. Heroku recommends upgrading to a patched version immediately.

Instructions

  • git clone [email protected]:heroku/heroku-CVE-2013-0269.git
  • cd heroku-CVE-2013-0269
  • ruby heroku-CVE-2013-0269.rb

PGP Signature

The Heroku Security Team's PGP key is available at https://policy.heroku.com/security

Download Tool