Jruby - vulnerabilities (CVEs)

5 CVEs in 2 products, 0 in the last 30 days, newest from 2025-05-07.

Products

• Jruby - 4 CVEs
• Jruby-openssl - 2 CVEs

Newest CVEs of Jruby

• CVE-2025-46551 - CVSS 5.7 (medium), 2025-05-07: JRuby-OpenSSL is an add-on gem for JRuby that emulates the Ruby OpenSSL native library. Starting in JRuby-OpenSSL version 0.12.1 and prior to version 0.15.4…
• CVE-2009-4123 - CVSS 7.5 (high), 2023-12-12: The jruby-openssl gem before 0.6 for JRuby mishandles SSL certificate validation.
• CVE-2012-5370 - CVSS 5 (medium), 2012-11-28: JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause…
• CVE-2010-1330 - CVSS 4.3 (medium), 2012-11-23: The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not properly handle characters immediately after a UTF-8 character, which…
• CVE-2011-4838 - CVSS 5 (medium), 2011-12-30: JRuby before 1.6.5.1 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to…