Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.jruby/jruby@1.7.3
purl pkg:maven/org.jruby/jruby@1.7.3
Next non-vulnerable version 9.4.12.1
Latest non-vulnerable version 10.0.0.1
Risk score
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
CVE-2013-2035

Predictable temporary file name leading to local arbitrary code execution When a custom library path is not specified, allows local …
1.7.5
Vulnerable
CVE-2013-1856

Improper Input Validation The `ActiveSupport::XmlMini_JDOM` backend in `lib/active_support/xml_mini/jdom.rb` in the Active Support component does not properly restrict the capabilities of … There are no reported fixed by versions.
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
GHSA-hgg7-cghq-xhf4
Ruby vulnerable to denial of service When reading text nodes from an XML document, the REXML parser can be coerced … CVE-2013-1821
CVE-2013-0269
Denial of Service and SQL Injection This package allows remote attackers to cause a denial of service (resource consumption) or …