org.jruby:jruby (1.7.20.1), org.jruby:jruby-complete (1.7.20.1) +1 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.20.1)

org.jruby:jruby-stdlib MAVEN version 1.7.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby 1.7.20.1 - org.jruby:jruby-complete 1.7.20.1 - org.jruby:jruby-noasm 1.7.20.1 Source cves:...

com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin (1.1), org.jruby:jruby (1.7.24) +3 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.24)

org.jruby:jruby-stdlib MAVEN version 1.7.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin 1.1 - org.jruby:jruby 1.7.24 -...

io.tesla.polyglot:tesla-polyglot-ruby (0.0.9), org.apache.camel:camel-ruby (2.13.0) +2 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.10)

org.jruby:jruby-stdlib MAVEN version 1.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - io.tesla.polyglot:tesla-polyglot-ruby 0.0.9 - org.apache.camel:camel-ruby 2.13.0 - org.jruby:jruby 1.7.10 -...

org.jruby:jruby-core (1.7.0) potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.0)

org.jruby:jruby-stdlib MAVEN version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby-core 1.7.0 Source cves: CVE-2018-1000073 Source advisory: OSV:GHSA-GX69-6CP4-HXRJ...

org.jruby:jruby (1.7.8), org.jruby:jruby-dist (1.7.8) +3 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.8)

org.jruby:jruby-stdlib MAVEN version 1.7.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby 1.7.8 - org.jruby:jruby-dist 1.7.8 - org.jruby:jruby-noasm 1.7.8 - ro.isdc.wro4j:wro4j-extensions...

com.tecnoguru:scuby_2.10 (0.2.6), com.tecnoguru:scuby_2.11 (0.2.6) +5 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.21)

org.jruby:jruby-stdlib MAVEN version 1.7.21 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.tecnoguru:scuby2.10 0.2.6 - com.tecnoguru:scuby2.11 0.2.6 - org.jruby.mains:jruby-mains 0.4.0 - org.jruby:jrub...

org.jruby:jruby (1.7.16.2), org.jruby:jruby-complete (1.7.16.2) +1 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.16.2)

org.jruby:jruby-stdlib MAVEN version 1.7.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby 1.7.16.2 - org.jruby:jruby-complete 1.7.16.2 - org.jruby:jruby-noasm 1.7.16.2 Source cves:...

org.jruby:jruby-core (1.7.2), org.sonatype.nexus.plugins:nexus-ruby-plugin (1.0.0) +1 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.2)

org.jruby:jruby-stdlib MAVEN version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby-core 1.7.2 - org.sonatype.nexus.plugins:nexus-ruby-plugin 1.0.0 -...

com.buschmais.jqassistant.cli:application (1.4.0), com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv2 (1.4.0) +41 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.27)

org.jruby:jruby-stdlib MAVEN version 1.7.27 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.buschmais.jqassistant.cli:application 1.4.0 - com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv2...

org.jruby:jruby (1.7.16), org.jruby:jruby-complete (1.7.16) +1 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.16)

org.jruby:jruby-stdlib MAVEN version 1.7.16 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby 1.7.16 - org.jruby:jruby-complete 1.7.16 - org.jruby:jruby-noasm 1.7.16 Source cves:...

org.jruby:jruby (1.7.11), org.jruby:jruby-noasm (1.7.11) +7 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.11)

org.jruby:jruby-stdlib MAVEN version 1.7.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby 1.7.11 - org.jruby:jruby-noasm 1.7.11 - org.nuiton.js:nuiton-js-wro 1.0.3 -...

org.jruby:jruby (1.7.7), org.jruby:jruby-dist (1.7.7) +1 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.7)

org.jruby:jruby-stdlib MAVEN version 1.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby 1.7.7 - org.jruby:jruby-dist 1.7.7 - org.jruby:jruby-noasm 1.7.7 Source cves: CVE-2018-1000073 Sour...

org.ocpsoft.rewrite.showcase:rewrite-showcase-transform (2.0.0.beta1), org.ocpsoft.rewrite:rewrite-distribution (2.0.0.beta1) +1 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.6.8)

org.jruby:jruby-stdlib MAVEN version 1.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.ocpsoft.rewrite.showcase:rewrite-showcase-transform 2.0.0.beta1 - org.ocpsoft.rewrite:rewrite-distribution...

com.github.stefanliebenberg:blender-css (>=1.0, <=1.1), io.tesla.polyglot:tesla-polyglot-ruby (>=0.1.0, <=0.1.1) +5 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.12)

org.jruby:jruby-stdlib MAVEN version 1.7.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.github.stefanliebenberg:blender-css =1.0, =0.1.0, =2.12.4, =2.1.0, =4.0.0 Source cves: CVE-2018-1000073 Source...

com.netflix.rxjava:rxjava-jruby (0.20.7), io.tesla.polyglot:tesla-polyglot-ruby (>=0.0.1, <=0.0.8) +3 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.5)

org.jruby:jruby-stdlib MAVEN version 1.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.netflix.rxjava:rxjava-jruby 0.20.7 - io.tesla.polyglot:tesla-polyglot-ruby =0.0.1, =0.0.8 - org.jruby:jruby 1.7...

io.takari.polyglot:polyglot-ruby (>=0.1.13, <=0.1.14), io.takari.polyglot:polyglot-translate-plugin (>=0.1.13, <=0.1.14) +3 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.22)

org.jruby:jruby-stdlib MAVEN version 1.7.22 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - io.takari.polyglot:polyglot-ruby =0.1.13, =0.1.13, =0.1.14 - org.jruby:jruby 1.7.22 - org.jruby:jruby-complete...

org.jruby:jruby (1.7.16.1), org.jruby:jruby-complete (1.7.16.1) +1 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.16.1)

org.jruby:jruby-stdlib MAVEN version 1.7.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby 1.7.16.1 - org.jruby:jruby-complete 1.7.16.1 - org.jruby:jruby-noasm 1.7.16.1 Source cves:...

Cross-site Scripting in in JRuby

The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not properly handle characters immediately after a UTF-8 character, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted string...

GHSA-WMQ2-JC9M-XP4M Cross-site Scripting in in JRuby

The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not properly handle characters immediately after a UTF-8 character, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted string...

GHSA-GX8X-G87M-H5Q6 Denial of Service (DoS) in Nokogiri on JRuby

Summary Nokogiri v1.13.4 updates the vendored org.cyberneko.html library to 1.9.22.noko2 which addresses CVE-2022-24839. That CVE is rated 7.5 High Severity. See GHSA-9849-p7jc-9rmv for more information. Please note that this advisory only applies to the JRuby implementation of Nokogiri = 1.13.4...