Skip to content
OpenAdvisories
Unscored DSA-2738-1 2 CVEs

ruby1.9.1 - several

Published Aug 18, 2013 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 6.0 ruby1.9.1 1.9.2.0-2+deb6u1
Debian · 7 ruby1.9.1 1.9.3.194-8.1+deb7u1

Vulnerabilities 2

  • Medium —
    CVE-2013-1821

    Ruby vulnerable to denial of service

    lib/rexml/text.rb in the REXML parser in Ruby before 1.9.3-p392 allows remote attackers to cause a denial of service (memory consumption and crash) via crafted text nodes in an XML document, aka an XML Entity Expansion (XEE) attack.

    org.jruby:jruby Maven
  • Unscored —
    CVE-2013-4073

    The OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1.8.7-p374, 1.9 before 1…