Skip to content
OpenAdvisories
Unscored DLA-209-1 2 CVEs

jruby - security update

Published Apr 29, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 jruby 1.5.1-1+deb6u1

Vulnerabilities 2

  • Unscored —
    CVE-2011-4838

    JRuby before 1.6.5.1 computes hash values without restricting the ability to trigger hash collisions predictably, which…

    jruby Debian
  • Medium —
    CVE-2012-5370

    JRuby denial of service via Hash Collision

    JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table…

    jruby org.jruby:jruby-parent Debian Maven