Org.jruby:jruby

This hub aggregates every CVE we track for Org.jruby:jruby, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 2 most recently published vulnerabilities affecting Org.jruby:jruby.

• CVE-2025-46551JRuby-OpenSSL has hostname verification disabled by default3.7May 7, 2025
• CVE-2013-1821lib/rexml/text.rb in the REXML parser in Ruby before 1.9.3-p392 allows remote attackers to cause a denial of service (memory consumption and crash) via crafted text nodes in an XML document, aka an...5.0Apr 9, 2013