Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.jruby:jruby-parent

2 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2
Registry
Maven Central

Advisories 2

  • JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent…

    Affected: fixed in 1.7.1.

  • Rack before 1.1.3, 1.2.x before 1.2.5, and 1.3.x before 1.3.6 computes hash values for form parameters without restricting the ability to…

    Affected: fixed in 1.6.5.1.