JRuby 1.2.0
Approved changes feed: RSS · Atom
cpe:2.3:a:jruby:jruby:1.2.0:*:*:*:*:*:*:*
part: a version: 1.2.0 update: *
| Vendor | Jruby (35aad96b-b44f-560c-a64f-50aa09403beb) |
|---|---|
| Product | Jruby (ae5c6e22-be94-5488-89d6-fdc4cd2557bf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/jruby |
purl2cpe | 2026-06-01 10:18:21.028938 |
pkg:deb/ubuntu/jruby |
purl2cpe | 2026-06-01 10:18:21.028940 |
pkg:docker/jruby |
purl2cpe | 2026-06-01 10:18:21.028941 |
pkg:github/jruby/jruby |
purl2cpe | 2026-06-01 10:18:21.028943 |
pkg:gitlab/cleveron/jruby |
purl2cpe | 2026-06-01 10:18:21.028944 |
pkg:maven/org.jruby/jruby-parent |
purl2cpe | 2026-06-01 10:18:21.028945 |
pkg:rpm/opensuse/jruby |
purl2cpe | 2026-06-01 10:18:21.028947 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-1330 |
vulnerable | 2026-06-08 04:54:07.262211 |
Details available
The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not properly handle characters immediately after a UTF-8 character, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted string.
Published: 2012-11-23T19:00:00.000Z
Updated: 2024-08-07T01:21:18.254Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.