Skip to content

Product

org.jruby/jruby-core vulnerabilities

1 published CVE affecting org.jruby/jruby-core, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest org.jruby/jruby-core CVEs

Newest publication first

  1. CVE-2010-1330 Cross-site Scripting in in JRuby

    Published
    MediumCVSS 4.3 EPSS 2.2%

    The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not properly handle characters immediately after a UTF-8 character, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted string.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.