Read the docs

jruby

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

jruby records in CISA KEV

No jruby vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Jruby 4 records MEDIUM Jruby-openssl 2 records MEDIUM

Records

4 records in Jruby · all components

TI-2025-29269 CVE-2025-46551 · GHSA-72qj-48g4-5xgx

JRuby-OpenSSL has hostname verification disabled by default

Priority MEDIUM 59

JRuby-OpenSSL is an add-on gem for JRuby that emulates the Ruby OpenSSL native library.

CVSS 4.0MEDIUM 5.7 Network Low privileges No interaction EPSS 0.00201 Published 2025-05-07 Partial fix · 0.15.4, 10.0.0.1 +1 CWE-295
TI-2012-04543 CVE-2012-5370 · GHSA-fmmq-j7pq-f85c

JRuby computes hash values without properly restricting the ability to trigger hash…

Priority LOW 27

JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02249 Published 2012-11-28 Partial fix · 1.7.1 CWE-310
TI-2010-01285 CVE-2010-1330 · GHSA-wmq2-jc9m-xp4m

The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not…

Priority LOW 24

The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not properly handle characters immediately after a UTF-8 character, which allows remote attackers to conduct cross-site scripting (XSS)…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02218 Published 2012-11-23 Fixed in 1.4.1 CWE-79
Open these records in search →