jruby

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

jruby records in CISA KEV

No jruby vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Jruby-openssl · all components

TI-2025-29269 CVE-2025-46551 · GHSA-72qj-48g4-5xgx

MEDIUM 59

JRuby-OpenSSL is an add-on gem for JRuby that emulates the Ruby OpenSSL native library.

CVSS 4.0MEDIUM 5.7 Network Low privileges No interaction EPSS 0.00201 Published 2025-05-07 Partial fix · 0.15.4, 10.0.0.1 +1 CWE-295

TI-2009-03911 CVE-2009-4123 · GHSA-xgv7-pqqh-h2w9

LOW 34

The jruby-openssl gem before 0.6 for JRuby mishandles SSL certificate validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.006 Published 2023-12-12 Fixed in 0.6 CWE-295