Skip to content
OpenAdvisories

Package · Maven

org.jruby:jruby-parent

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium —
    CVE-2012-5370

    JRuby denial of service via Hash Collision

    JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table…

    jruby org.jruby:jruby-parent Debian Maven
  • Medium —
    CVE-2011-5036

    Rack Gem Subject to Denial of Service via Hash Collisions

    Rack before 1.1.3, 1.2.x before 1.2.5, and 1.3.x before 1.3.6 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by send…

    rack ruby-rack org.jruby:jruby-parent Debian Maven RubyGems