CVE mentions, exploit signals, and PoC evidence in one fast public view.
Vendor archive
5 CVEs tagged to vendor jruby — 0 Critical, 1 High, 4 Medium, 0 Low, 0 Unrated.
JRuby-OpenSSL is an add-on gem for JRuby that emulates the Ruby OpenSSL native library. Starting in JRuby-OpenSSL version 0.12.1 and prior to version 0.15.4 (corresponding to JRub…
The jruby-openssl gem before 0.6 for JRuby mishandles SSL certificate validation.
JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (…
The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not properly handle characters immediately after a UTF-8 character, which allows remote attack…
JRuby before 1.6.5.1 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of ser…