Vulnerabilities > Jruby > Jruby > 0.9.2
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2012-11-23 | CVE-2010-1330 | Cross-Site Scripting vulnerability in Jruby The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not properly handle characters immediately after a UTF-8 character, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted string. | 4.3 |
2011-12-30 | CVE-2011-4838 | Resource Exhaustion vulnerability in Jruby JRuby before 1.6.5.1 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table. | 5.0 |