com.github.fmjsjx:bson-model3-generator (>=3.0.0-alpha1, <=3.0.0-alpha2), com.github.the-alchemist:seafoam-jruby (>=0.18, <=0.32) +19 more potentially affected by CVE-2025-43857 via org.jruby:jruby-stdlib (>=10.0.0.0, <=10.1.2.0)

org.jruby:jruby-stdlib MAVEN version =10.0.0.0, =3.0.0-alpha1, =0.18, =0.5.0, =44, =44, =44, =187, =1.1.9.4, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =1.3.0, =10.0.0.0, =10.1.2.0 and more Source cves: CVE-2025-43857 Source advisory: SNYK:JAVA-ORGJRUBY-10557729...

Denial of Service (DoS)

Overview org.jruby:jruby-stdlib is a JRuby Lib Setup package. Affected versions of this package are vulnerable to Denial of Service DoS through the response parser which uses Rangetoa to convert the uid-set data into arrays of integers, without limitations on the expanded size of the ranges...

com.tacitknowledge:simulator-core (1.1), org.jruby:jruby-core (1.7.0.rc1) potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.0.rc1)

org.jruby:jruby-stdlib MAVEN version 1.7.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.tacitknowledge:simulator-core 1.1 - org.jruby:jruby-core 1.7.0.rc1 Source cves: CVE-2018-1000079 Source...

io.takari.polyglot:polyglot-ruby (>=0.1.13, <=0.1.14), io.takari.polyglot:polyglot-translate-plugin (>=0.1.13, <=0.1.14) +3 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.22)

org.jruby:jruby-stdlib MAVEN version 1.7.22 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - io.takari.polyglot:polyglot-ruby =0.1.13, =0.1.13, =0.1.14 - org.jruby:jruby 1.7.22 - org.jruby:jruby-complete...

org.ocpsoft.rewrite:rewrite-distribution (>=2.0.0.alpha2, <=2.0.0.alpha6), org.ocpsoft.rewrite:rewrite-transform-markup (>=1.1.0.final, <=2.0.0.alpha6) potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.6.7.2)

org.jruby:jruby-stdlib MAVEN version 1.6.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.ocpsoft.rewrite:rewrite-distribution =2.0.0.alpha2, =1.1.0.final, =2.0.0.alpha6 Source cves: CVE-2018-1000079...

org.jruby:jruby-core (1.7.0.rc2) potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.0.rc2)

org.jruby:jruby-stdlib MAVEN version 1.7.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby-core 1.7.0.rc2 Source cves: CVE-2018-1000079 Source advisory: OSV:GHSA-8QXG-MFF5-J3WC...

org.jruby:jruby-core (1.7.2), org.sonatype.nexus.plugins:nexus-ruby-plugin (1.0.0) +1 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.2)

org.jruby:jruby-stdlib MAVEN version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby-core 1.7.2 - org.sonatype.nexus.plugins:nexus-ruby-plugin 1.0.0 -...

com.sysgears.grain:grain (>=0.6.0, <=0.7.0), org.jruby:jruby-core (1.7.3) potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.3)

org.jruby:jruby-stdlib MAVEN version 1.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.sysgears.grain:grain =0.6.0, =0.7.0 - org.jruby:jruby-core 1.7.3 Source cves: CVE-2018-1000079 Source advisory:...

org.jruby:jruby-core (1.7.4), org.opoo.press.maven.plugins:opoopress-maven-plugin (>=1.0.0, <=2.0-beta-1) +6 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.4)

org.jruby:jruby-stdlib MAVEN version 1.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby-core 1.7.4 - org.opoo.press.maven.plugins:opoopress-maven-plugin =1.0.0, =1.0.0, =1.1.3 -...

io.tesla.polyglot:tesla-polyglot-ruby (0.0.9), org.apache.camel:camel-ruby (2.13.0) +2 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.10)

org.jruby:jruby-stdlib MAVEN version 1.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - io.tesla.polyglot:tesla-polyglot-ruby 0.0.9 - org.apache.camel:camel-ruby 2.13.0 - org.jruby:jruby 1.7.10 -...

com.github.stefanliebenberg:blender-css (>=1.0, <=1.1), io.tesla.polyglot:tesla-polyglot-ruby (>=0.1.0, <=0.1.1) +5 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.12)

org.jruby:jruby-stdlib MAVEN version 1.7.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.github.stefanliebenberg:blender-css =1.0, =0.1.0, =2.12.4, =2.1.0, =4.0.0 Source cves: CVE-2018-1000079 Source...

org.ocpsoft.rewrite.showcase:rewrite-showcase-transform (2.0.0.beta1), org.ocpsoft.rewrite:rewrite-distribution (2.0.0.beta1) +1 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.6.8)

org.jruby:jruby-stdlib MAVEN version 1.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.ocpsoft.rewrite.showcase:rewrite-showcase-transform 2.0.0.beta1 - org.ocpsoft.rewrite:rewrite-distribution...

com.byclosure.maven.plugins:bundler-maven-plugin (>=0.0.1, <=0.0.3), de.saumya.mojo:jruby-mains (>=0.1.0, <=0.3.1) +10 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.19)

org.jruby:jruby-stdlib MAVEN version 1.7.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.byclosure.maven.plugins:bundler-maven-plugin =0.0.1, =0.1.0, =0.2, =0.1.3, =0.1.6, =0.2.0, =0.2.0, =0.2.1 Sour...

com.buschmais.jqassistant.core:jqassistant.core.analysis (>=1.0.0-rc1, <=1.0.0), com.buschmais.jqassistant.core:jqassistant.core.plugin (>=1.0.0-rc1, <=1.0.0) +35 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.18)

org.jruby:jruby-stdlib MAVEN version 1.7.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.buschmais.jqassistant.core:jqassistant.core.analysis =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc...

io.sysmo:nchecks (0.9.0), io.takari.polyglot:polyglot-ruby (>=0.1.10, <=0.1.12) +4 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.20)

org.jruby:jruby-stdlib MAVEN version 1.7.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - io.sysmo:nchecks 0.9.0 - io.takari.polyglot:polyglot-ruby =0.1.10, =0.1.10, =0.1.12 - org.jruby:jruby 1.7.20 -...

org.jruby:jruby (1.7.25), org.jruby:jruby-complete (1.7.25) +1 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.25)

org.jruby:jruby-stdlib MAVEN version 1.7.25 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby 1.7.25 - org.jruby:jruby-complete 1.7.25 - org.jruby:jruby-noasm 1.7.25 Source cves:...

com.github.lodsve:lodsve-amqp (>=2.5.7, <=2.5.10), com.github.lodsve:lodsve-cache (>=2.5.7, <=2.5.10) +20 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.26)

org.jruby:jruby-stdlib MAVEN version 1.7.26 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.github.lodsve:lodsve-amqp =2.5.7, =2.5.7, =2.5.7, =2.5.7, =2.5.7, =2.5.7, =2.5.7, =2.5.7, =2.5.7, =2.5.7,...

be.yildiz-games:engine-client (1.0.0), be.yildiz-games:module-scripting (>=1.0.2, <=1.0.4) +105 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (>=9.0.0.0.rc1, <=9.1.15.0)

org.jruby:jruby-stdlib MAVEN version =9.0.0.0.rc1, =1.0.2, =1.2.0-rc1, =1.1.0-rc1, =1.1.0-rc1, =1.1.0-rc1, =1.2.0-rc1, =1.2.0-rc1, =1.2.0-rc1, =1.1.0-rc1, =1.1.0-rc1, =1.1.0-rc1, =1.1.0-rc1, =1.2-rc1, =1.3 and more Source cves: CVE-2018-1000079 Source advisory: GHSA-8QXG-MFF5-J3WC...

org.jruby:jruby-core (1.7.0) potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.0)

org.jruby:jruby-stdlib MAVEN version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby-core 1.7.0 Source cves: CVE-2018-1000079 Source advisory: OSV:GHSA-8QXG-MFF5-J3WC...

org.jruby:jruby-core (1.7.1) potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.1)

org.jruby:jruby-stdlib MAVEN version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby-core 1.7.1 Source cves: CVE-2018-1000079 Source advisory: OSV:GHSA-8QXG-MFF5-J3WC...