Approved changes feed: RSS · Atom
cpe:2.3:a:jruby:jruby:-:*:*:*:*:*:*:*
part: a version: - update: *
| Vendor | Jruby (35aad96b-b44f-560c-a64f-50aa09403beb) |
|---|---|
| Product | Jruby (ae5c6e22-be94-5488-89d6-fdc4cd2557bf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/jruby |
purl2cpe | 2026-06-01 10:18:21.028630 |
pkg:deb/ubuntu/jruby |
purl2cpe | 2026-06-01 10:18:21.028632 |
pkg:docker/jruby |
purl2cpe | 2026-06-01 10:18:21.028633 |
pkg:github/jruby/jruby |
purl2cpe | 2026-06-01 10:18:21.028635 |
pkg:gitlab/cleveron/jruby |
purl2cpe | 2026-06-01 10:18:21.028636 |
pkg:maven/org.jruby/jruby-parent |
purl2cpe | 2026-06-01 10:18:21.028638 |
pkg:rpm/opensuse/jruby |
purl2cpe | 2026-06-01 10:18:21.028639 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2012-5370 |
vulnerable | 2026-06-08 05:02:56.309747 |
Details available
JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table, as demonstrated by a universal multicollision attack against the MurmurHash2 algorithm, a different vulnerability than CVE-2011-4838.
Published: 2012-11-28T11:00:00.000Z
Updated: 2024-08-06T21:05:47.188Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.