Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/jruby@1.5.6-5?distro=trixie
purl pkg:deb/debian/jruby@1.5.6-5?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-4eas-fpqk-7ugd JRuby denial of service via Hash Collision JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table, as demonstrated by a universal multicollision attack against the MurmurHash2 algorithm, a different vulnerability than CVE-2011-4838. CVE-2012-5370
GHSA-fmmq-j7pq-f85c
OSV-87864

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T12:39:21.873619+00:00 Debian Importer Fixing VCID-4eas-fpqk-7ugd https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:40:24.883895+00:00 Debian Importer Fixing VCID-4eas-fpqk-7ugd https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:27:54.658261+00:00 Debian Importer Fixing VCID-4eas-fpqk-7ugd https://security-tracker.debian.org/tracker/data/json 38.1.0