Skip to content
OpenAdvisories
Unscored DLA-263-1 2 CVEs

ruby1.9.1 - security update

Published Jun 30, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 ruby1.9.1 1.9.2.0-2+deb6u5

Vulnerabilities 2

  • Unscored —
    CVE-2012-5371

    Ruby (aka CRuby) 1.9 before 1.9.3-p327 and 2.0 before r37575 computes hash values without properly restricting the abil…

  • High —
    CVE-2013-0269 Public exploit EPSS 14%

    JSON gem has Improper Input Validation vulnerability

    The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creatio…

    json ruby-json Debian RubyGems