Search for packages
Package details: pkg:deb/debian/jruby@9.4.8.0%2Bds-3
purl pkg:deb/debian/jruby@9.4.8.0%2Bds-3
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-q5ek-4e1r-eyeb A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2. CVE-2023-28756
GHSA-fg7x-g82r-94qc
VCID-qfe5-w7ge-skfa A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1. CVE-2023-28755
GHSA-hv5j-3h9f-99c2

Date Actor Action Vulnerability Source VulnerableCode Version
2025-07-03T19:21:47.623592+00:00 Debian Importer Fixing VCID-q5ek-4e1r-eyeb https://security-tracker.debian.org/tracker/data/json 37.0.0
2025-07-03T18:57:47.490629+00:00 Debian Importer Fixing VCID-qfe5-w7ge-skfa https://security-tracker.debian.org/tracker/data/json 37.0.0
2025-07-01T16:17:05.521869+00:00 Debian Importer Fixing VCID-q5ek-4e1r-eyeb https://security-tracker.debian.org/tracker/data/json 36.1.3
2025-07-01T16:13:20.265621+00:00 Debian Importer Fixing VCID-qfe5-w7ge-skfa https://security-tracker.debian.org/tracker/data/json 36.1.3