Skip to content
OpenAdvisories

Package · Maven

org.jruby:jruby

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.7
    CVE-2025-46551

    JRuby-OpenSSL has hostname verification disabled by default

    JRuby-OpenSSL is an add-on gem for JRuby that emulates the Ruby OpenSSL native library. Starting in JRuby-OpenSSL version 0.12.1 and prior to version 0.15.4 (corresponding to JRuby versions starting in 9.3.4.0 prior to 9.4.12.1 and 10.0.0.0 prior to 10.0.0.1)…

    jruby jruby-openssl jruby-openssl org.jruby:jruby Ubuntu Maven RubyGems
  • Medium —
    CVE-2013-1821

    Ruby vulnerable to denial of service

    lib/rexml/text.rb in the REXML parser in Ruby before 1.9.3-p392 allows remote attackers to cause a denial of service (memory consumption and crash) via crafted text nodes in an XML document, aka an XML Entity Expansion (XEE) attack.

    org.jruby:jruby Maven