com.baulsupp.kolja:kolja-assembly (1.0.0), com.baulsupp.kolja:kolja-bank (1.0.0) +35 more potentially affected by CVE-2013-1821 via org.jruby:jruby (>=1.0, <=1.7.2)

org.jruby:jruby MAVEN version =1.0, =0.8.17, =0.8.5, =0.1.0, =0.1.0, =0.1.0, =2.1.1, =2.5.6 - org.apache.activemq:activemq-camel 5.3.0 and more Source cves: CVE-2013-1821 Source advisory: GHSA-HGG7-CGHQ-XHF4...

GHSA-HGG7-CGHQ-XHF4 Ruby vulnerable to denial of service

When reading text nodes from an XML document, the REXML parser can be coerced in to allocating extremely large string objects which can consume all of the memory on a machine, causing a denial of service. Jruby resolves this bug in version 1.7.3 as noted in...

io.sysmo:nchecks (0.9.0), io.takari.polyglot:polyglot-ruby (>=0.1.10, <=0.1.12) +4 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.20)

org.jruby:jruby-stdlib MAVEN version 1.7.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - io.sysmo:nchecks 0.9.0 - io.takari.polyglot:polyglot-ruby =0.1.10, =0.1.10, =0.1.12 - org.jruby:jruby 1.7.20 -...

org.jruby:jruby (1.7.7), org.jruby:jruby-dist (1.7.7) +1 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.7)

org.jruby:jruby-stdlib MAVEN version 1.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby 1.7.7 - org.jruby:jruby-dist 1.7.7 - org.jruby:jruby-noasm 1.7.7 Source cves: CVE-2018-1000079 Sour...

com.tecnoguru:scuby_2.10 (0.2.6), com.tecnoguru:scuby_2.11 (0.2.6) +5 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.21)

org.jruby:jruby-stdlib MAVEN version 1.7.21 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.tecnoguru:scuby2.10 0.2.6 - com.tecnoguru:scuby2.11 0.2.6 - org.jruby.mains:jruby-mains 0.4.0 - org.jruby:jrub...

org.jruby:jruby (1.7.11), org.jruby:jruby-noasm (1.7.11) +7 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.11)

org.jruby:jruby-stdlib MAVEN version 1.7.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby 1.7.11 - org.jruby:jruby-noasm 1.7.11 - org.nuiton.js:nuiton-js-wro 1.0.3 -...

org.ocpsoft.rewrite.showcase:rewrite-showcase-transform (2.0.0.beta1), org.ocpsoft.rewrite:rewrite-distribution (2.0.0.beta1) +1 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.6.8)

org.jruby:jruby-stdlib MAVEN version 1.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.ocpsoft.rewrite.showcase:rewrite-showcase-transform 2.0.0.beta1 - org.ocpsoft.rewrite:rewrite-distribution...

com.github.automately:automately-core (>=1.8.6, <=1.11.1), org.jruby:jruby (1.7.14) +8 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.14)

org.jruby:jruby-stdlib MAVEN version 1.7.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.github.automately:automately-core =1.8.6, =1.7.7, =1.7.7, =2.1.15, =2.1.15, =2.4.0, =2.1.15, =2.5.4 Source cve...

com.tacitknowledge:simulator-core (1.1), org.jruby:jruby-core (1.7.0.rc1) potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.0.rc1)

org.jruby:jruby-stdlib MAVEN version 1.7.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.tacitknowledge:simulator-core 1.1 - org.jruby:jruby-core 1.7.0.rc1 Source cves: CVE-2018-1000079 Source...

org.jruby:jruby-core (1.7.4), org.opoo.press.maven.plugins:opoopress-maven-plugin (>=1.0.0, <=2.0-beta-1) +6 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.4)

org.jruby:jruby-stdlib MAVEN version 1.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby-core 1.7.4 - org.opoo.press.maven.plugins:opoopress-maven-plugin =1.0.0, =1.0.0, =1.1.3 -...

com.github.lodsve:lodsve-amqp (>=2.5.7, <=2.5.10), com.github.lodsve:lodsve-cache (>=2.5.7, <=2.5.10) +20 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.26)

org.jruby:jruby-stdlib MAVEN version 1.7.26 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.github.lodsve:lodsve-amqp =2.5.7, =2.5.7, =2.5.7, =2.5.7, =2.5.7, =2.5.7, =2.5.7, =2.5.7, =2.5.7, =2.5.7,...

org.jruby:jruby-core (1.7.0.rc2) potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.0.rc2)

org.jruby:jruby-stdlib MAVEN version 1.7.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby-core 1.7.0.rc2 Source cves: CVE-2018-1000079 Source advisory: OSV:GHSA-8QXG-MFF5-J3WC...

com.sysgears.grain:grain (>=0.6.0, <=0.7.0), org.jruby:jruby-core (1.7.3) potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.3)

org.jruby:jruby-stdlib MAVEN version 1.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.sysgears.grain:grain =0.6.0, =0.7.0 - org.jruby:jruby-core 1.7.3 Source cves: CVE-2018-1000079 Source advisory:...

com.tecnoguru:scuby_2.10 (0.2.5), com.tecnoguru:scuby_2.11 (0.2.5) +3 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.13)

org.jruby:jruby-stdlib MAVEN version 1.7.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.tecnoguru:scuby2.10 0.2.5 - com.tecnoguru:scuby2.11 0.2.5 - org.apache.camel:camel-ruby =2.12.5, =2.14.1 -...

com.byclosure.maven.plugins:bundler-maven-plugin (>=0.0.1, <=0.0.3), de.saumya.mojo:jruby-mains (>=0.1.0, <=0.3.1) +10 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.19)

org.jruby:jruby-stdlib MAVEN version 1.7.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.byclosure.maven.plugins:bundler-maven-plugin =0.0.1, =0.1.0, =0.2, =0.1.3, =0.1.6, =0.2.0, =0.2.0, =0.2.1 Sour...

com.netflix.rxjava:rxjava-jruby (0.20.7), io.tesla.polyglot:tesla-polyglot-ruby (>=0.0.1, <=0.0.8) +3 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.5)

org.jruby:jruby-stdlib MAVEN version 1.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.netflix.rxjava:rxjava-jruby 0.20.7 - io.tesla.polyglot:tesla-polyglot-ruby =0.0.1, =0.0.8 - org.jruby:jruby 1.7...

be.yildiz-games:engine-client (1.0.0), be.yildiz-games:module-scripting (>=1.0.2, <=1.0.4) +105 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (>=9.0.0.0.rc1, <=9.1.15.0)

org.jruby:jruby-stdlib MAVEN version =9.0.0.0.rc1, =1.0.2, =1.2.0-rc1, =1.1.0-rc1, =1.1.0-rc1, =1.1.0-rc1, =1.2.0-rc1, =1.2.0-rc1, =1.2.0-rc1, =1.1.0-rc1, =1.1.0-rc1, =1.1.0-rc1, =1.1.0-rc1, =1.2-rc1, =1.3 and more Source cves: CVE-2018-1000079 Source advisory: GHSA-8QXG-MFF5-J3WC...

org.jruby:jruby-core (1.7.0) potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.0)

org.jruby:jruby-stdlib MAVEN version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby-core 1.7.0 Source cves: CVE-2018-1000079 Source advisory: OSV:GHSA-8QXG-MFF5-J3WC...

org.jruby:jruby-core (1.7.1) potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.1)

org.jruby:jruby-stdlib MAVEN version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby-core 1.7.1 Source cves: CVE-2018-1000079 Source advisory: OSV:GHSA-8QXG-MFF5-J3WC...

org.jruby:jruby (1.7.16.2), org.jruby:jruby-complete (1.7.16.2) +1 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.16.2)

org.jruby:jruby-stdlib MAVEN version 1.7.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby 1.7.16.2 - org.jruby:jruby-complete 1.7.16.2 - org.jruby:jruby-noasm 1.7.16.2 Source cves:...