Skip to content

Product

org.jruby/jruby-parent vulnerabilities

2 published CVES affecting org.jruby/jruby-parent, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
2
Low
0
Unscored
0
CISA KEV
0

Latest org.jruby/jruby-parent CVEs

Newest publication first

  1. CVE-2012-5370 JRuby denial of service via Hash Collision

    Published
    MediumCVSS 5.0

    JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table, as demonstrated by...

  2. CVE-2011-5036 Rack Gem Subject to Denial of Service via Hash Collisions

    Published
    MediumCVSS 5.0 PoC

    Rack before 1.1.3, 1.2.x before 1.2.5, and 1.3.x before 1.3.6 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted para...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.