Skip to content
OpenAdvisories

Package · RubyGems

jruby-openssl

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.7
    CVE-2025-46551

    JRuby-OpenSSL has hostname verification disabled by default

    JRuby-OpenSSL is an add-on gem for JRuby that emulates the Ruby OpenSSL native library. Starting in JRuby-OpenSSL version 0.12.1 and prior to version 0.15.4 (corresponding to JRuby versions starting in 9.3.4.0 prior to 9.4.12.1 and 10.0.0.0 prior to 10.0.0.1)…

    jruby jruby-openssl jruby-openssl org.jruby:jruby Ubuntu Maven RubyGems
  • High 7.5
    CVE-2009-4123

    jruby-openssl gem for JRuby fails to do proper certificate validation

    The jruby-openssl gem before 0.6 for JRuby mishandles SSL certificate validation.

    jruby-openssl RubyGems