Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.jruby/jruby@1.5.2
purl pkg:maven/org.jruby/jruby@1.5.2
Next non-vulnerable version 9.4.12.1
Latest non-vulnerable version 10.0.0.1
Risk score
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-hgg7-cghq-xhf4
Aliases:
CVE-2013-1821
Ruby vulnerable to denial of service When reading text nodes from an XML document, the REXML parser can be coerced …
1.7.3
Vulnerable
CVE-2013-2035

Predictable temporary file name leading to local arbitrary code execution When a custom library path is not specified, allows local …
1.7.5
Vulnerable
CVE-2013-1856

Improper Input Validation The `ActiveSupport::XmlMini_JDOM` backend in `lib/active_support/xml_mini/jdom.rb` in the Active Support component does not properly restrict the capabilities of … There are no reported fixed by versions.
This package is not known to fix any advisories.