Jruby Openssl
by Jruby
Source repositories
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2009-4123 | Hig | 0.49 | 7.5 | 0.01 | Dec 12, 2023 | The jruby-openssl gem before 0.6 for JRuby mishandles SSL certificate validation. | ||
| CVE-2025-46551 | Low | 0.17 | 3.7 | 0.00 | May 7, 2025 | JRuby-OpenSSL is an add-on gem for JRuby that emulates the Ruby OpenSSL native library. Starting in JRuby-OpenSSL version 0.12.1 and prior to version 0.15.4 (corresponding to JRuby versions starting in 9.3.4.0 prior to 9.4.12.1 and 10.0.0.0 prior to 10.0.0.1), when verifying SSL… |
- risk 0.49cvss 7.5epss 0.01
The jruby-openssl gem before 0.6 for JRuby mishandles SSL certificate validation.
- risk 0.17cvss 3.7epss 0.00
JRuby-OpenSSL is an add-on gem for JRuby that emulates the Ruby OpenSSL native library. Starting in JRuby-OpenSSL version 0.12.1 and prior to version 0.15.4 (corresponding to JRuby versions starting in 9.3.4.0 prior to 9.4.12.1 and 10.0.0.0 prior to 10.0.0.1), when verifying SSL…