com.tecnoguru:scuby_2.10 (0.2.6), com.tecnoguru:scuby_2.11 (0.2.6) +5 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.21)

org.jruby:jruby-stdlib MAVEN version 1.7.21 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.tecnoguru:scuby2.10 0.2.6 - com.tecnoguru:scuby2.11 0.2.6 - org.jruby.mains:jruby-mains 0.4.0 - org.jruby:jrub...

org.jruby:jruby (1.7.16.2), org.jruby:jruby-complete (1.7.16.2) +1 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.16.2)

org.jruby:jruby-stdlib MAVEN version 1.7.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby 1.7.16.2 - org.jruby:jruby-complete 1.7.16.2 - org.jruby:jruby-noasm 1.7.16.2 Source cves:...

org.jruby:jruby-core (1.7.2), org.sonatype.nexus.plugins:nexus-ruby-plugin (1.0.0) +1 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.2)

org.jruby:jruby-stdlib MAVEN version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby-core 1.7.2 - org.sonatype.nexus.plugins:nexus-ruby-plugin 1.0.0 -...

com.buschmais.jqassistant.cli:application (1.4.0), com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv2 (1.4.0) +41 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.27)

org.jruby:jruby-stdlib MAVEN version 1.7.27 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.buschmais.jqassistant.cli:application 1.4.0 - com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv2...

org.jruby:jruby (1.7.16), org.jruby:jruby-complete (1.7.16) +1 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.16)

org.jruby:jruby-stdlib MAVEN version 1.7.16 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby 1.7.16 - org.jruby:jruby-complete 1.7.16 - org.jruby:jruby-noasm 1.7.16 Source cves:...

org.jruby:jruby (1.7.11), org.jruby:jruby-noasm (1.7.11) +7 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.11)

org.jruby:jruby-stdlib MAVEN version 1.7.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby 1.7.11 - org.jruby:jruby-noasm 1.7.11 - org.nuiton.js:nuiton-js-wro 1.0.3 -...

com.darrinholst:sass-java (>=3.4.4, <=3.4.20.0), com.darrinholst:sass-java-gems (>=3.4.4, <=3.4.20.0) +5 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.15)

org.jruby:jruby-stdlib MAVEN version 1.7.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.darrinholst:sass-java =3.4.4, =3.4.4, =3.4.4.1, =2.0-m1, =2.0-rc1 - org.jruby:jruby 1.7.15 -...

org.jruby:jruby (1.7.7), org.jruby:jruby-dist (1.7.7) +1 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.7)

org.jruby:jruby-stdlib MAVEN version 1.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby 1.7.7 - org.jruby:jruby-dist 1.7.7 - org.jruby:jruby-noasm 1.7.7 Source cves: CVE-2018-1000073 Sour...

org.ocpsoft.rewrite.showcase:rewrite-showcase-transform (2.0.0.beta1), org.ocpsoft.rewrite:rewrite-distribution (2.0.0.beta1) +1 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.6.8)

org.jruby:jruby-stdlib MAVEN version 1.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.ocpsoft.rewrite.showcase:rewrite-showcase-transform 2.0.0.beta1 - org.ocpsoft.rewrite:rewrite-distribution...

com.buschmais.jqassistant.core:jqassistant.core.analysis (>=1.0.0-rc1, <=1.0.0), com.buschmais.jqassistant.core:jqassistant.core.plugin (>=1.0.0-rc1, <=1.0.0) +35 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.18)

org.jruby:jruby-stdlib MAVEN version 1.7.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.buschmais.jqassistant.core:jqassistant.core.analysis =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc...

org.jruby:jruby-core (1.7.1) potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.1)

org.jruby:jruby-stdlib MAVEN version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby-core 1.7.1 Source cves: CVE-2018-1000073 Source advisory: OSV:GHSA-GX69-6CP4-HXRJ...

org.jruby.mains:jruby-mains (0.5.0), org.jruby:jruby (1.7.23) +2 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.23)

org.jruby:jruby-stdlib MAVEN version 1.7.23 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby.mains:jruby-mains 0.5.0 - org.jruby:jruby 1.7.23 - org.jruby:jruby-complete 1.7.23 - org.jruby:jruby-noa...

com.github.stefanliebenberg:blender-css (>=1.0, <=1.1), io.tesla.polyglot:tesla-polyglot-ruby (>=0.1.0, <=0.1.1) +5 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.12)

org.jruby:jruby-stdlib MAVEN version 1.7.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.github.stefanliebenberg:blender-css =1.0, =0.1.0, =2.12.4, =2.1.0, =4.0.0 Source cves: CVE-2018-1000073 Source...

com.netflix.rxjava:rxjava-jruby (0.20.7), io.tesla.polyglot:tesla-polyglot-ruby (>=0.0.1, <=0.0.8) +3 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.5)

org.jruby:jruby-stdlib MAVEN version 1.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.netflix.rxjava:rxjava-jruby 0.20.7 - io.tesla.polyglot:tesla-polyglot-ruby =0.0.1, =0.0.8 - org.jruby:jruby 1.7...

org.jruby:jruby (1.7.25), org.jruby:jruby-complete (1.7.25) +1 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.25)

org.jruby:jruby-stdlib MAVEN version 1.7.25 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby 1.7.25 - org.jruby:jruby-complete 1.7.25 - org.jruby:jruby-noasm 1.7.25 Source cves:...

io.takari.polyglot:polyglot-ruby (>=0.1.13, <=0.1.14), io.takari.polyglot:polyglot-translate-plugin (>=0.1.13, <=0.1.14) +3 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.22)

org.jruby:jruby-stdlib MAVEN version 1.7.22 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - io.takari.polyglot:polyglot-ruby =0.1.13, =0.1.13, =0.1.14 - org.jruby:jruby 1.7.22 - org.jruby:jruby-complete...

org.jruby:jruby (1.7.16.1), org.jruby:jruby-complete (1.7.16.1) +1 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.16.1)

org.jruby:jruby-stdlib MAVEN version 1.7.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby 1.7.16.1 - org.jruby:jruby-complete 1.7.16.1 - org.jruby:jruby-noasm 1.7.16.1 Source cves:...

Cross-site Scripting in in JRuby

The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not properly handle characters immediately after a UTF-8 character, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted string...

GHSA-WMQ2-JC9M-XP4M Cross-site Scripting in in JRuby

The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not properly handle characters immediately after a UTF-8 character, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted string...

Denial of Service (DoS) in Nokogiri on JRuby

Summary Nokogiri v1.13.4 updates the vendored org.cyberneko.html library to 1.9.22.noko2 which addresses CVE-2022-24839. That CVE is rated 7.5 High Severity. See GHSA-9849-p7jc-9rmv for more information. Please note that this advisory only applies to the JRuby implementation of Nokogiri = 1.13.4...