Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.jruby/jruby@1.7.2
purl pkg:maven/org.jruby/jruby@1.7.2
Next non-vulnerable version 9.4.12.1
Latest non-vulnerable version 10.0.0.1
Risk score
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
CVE-2013-2035

Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to … There are no reported fixed by versions.
GHSA-hgg7-cghq-xhf4
Aliases:
CVE-2013-1821
Ruby vulnerable to denial of service When reading text nodes from an XML document, the REXML parser can be coerced …
1.7.3
Vulnerable
CVE-2013-2035

Predictable temporary file name leading to local arbitrary code execution When a custom library path is not specified, allows local …
1.7.5
Vulnerable
CVE-2013-0269

Denial of Service and SQL Injection This package allows remote attackers to cause a denial of service (resource consumption) or …
1.7.3
Vulnerable
CVE-2013-1856

Improper Input Validation The `ActiveSupport::XmlMini_JDOM` backend in `lib/active_support/xml_mini/jdom.rb` in the Active Support component does not properly restrict the capabilities of … There are no reported fixed by versions.
This package is not known to fix any advisories.