JRuby 1.4.0 Release Candidate 2
Approved changes feed: RSS · Atom
cpe:2.3:a:jruby:jruby:1.4.0:rc2:*:*:*:*:*:*
part: a version: 1.4.0 update: rc2
| Vendor | Jruby (35aad96b-b44f-560c-a64f-50aa09403beb) |
|---|---|
| Product | Jruby (ae5c6e22-be94-5488-89d6-fdc4cd2557bf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/jruby |
purl2cpe | 2026-06-01 10:18:21.029053 |
pkg:deb/ubuntu/jruby |
purl2cpe | 2026-06-01 10:18:21.029054 |
pkg:docker/jruby |
purl2cpe | 2026-06-01 10:18:21.029056 |
pkg:github/jruby/jruby |
purl2cpe | 2026-06-01 10:18:21.029057 |
pkg:gitlab/cleveron/jruby |
purl2cpe | 2026-06-01 10:18:21.029058 |
pkg:maven/org.jruby/jruby-parent |
purl2cpe | 2026-06-01 10:18:21.029060 |
pkg:rpm/opensuse/jruby |
purl2cpe | 2026-06-01 10:18:21.029061 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-1330 |
vulnerable | 2026-06-08 04:54:07.272747 |
Details available
The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not properly handle characters immediately after a UTF-8 character, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted string.
Published: 2012-11-23T19:00:00.000Z
Updated: 2024-08-07T01:21:18.254Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.