TI-2025-29269 CVE-2025-46551 · GHSA-72qj-48g4-5xgx
JRuby-OpenSSL has hostname verification disabled by default
Priority MEDIUM 59
JRuby-OpenSSL is an add-on gem for JRuby that emulates the Ruby OpenSSL native library.
Vulnerabilities
4 records
TI-2012-04543 CVE-2012-5370 · GHSA-fmmq-j7pq-f85c
JRuby computes hash values without properly restricting the ability to trigger hash…
Priority LOW 27
JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an…
TI-2010-01285 CVE-2010-1330 · GHSA-wmq2-jc9m-xp4m
The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not…
Priority LOW 24
The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not properly handle characters immediately after a UTF-8 character, which allows remote attackers to conduct cross-site scripting (XSS)…
TI-2011-04166 CVE-2011-4838 · GHSA-cgqc-fqxr-q6r6
JRuby before 1.6.5.1 computes hash values without restricting the ability to trigger hash…
Priority LOW 30
JRuby before 1.6.5.1 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input…