{"action":"Upgrade jruby-openssl to 0.15.4 or later.","affected":[{"fixed":"0.15.4","introduced":"0.12.1"}],"component":"jruby-openssl","cve_ids":["CVE-2025-46551"],"ecosystem":"RubyGems","epss":0.00198,"exploited":false,"fixed_versions":["0.15.4"],"ghsa_id":"GHSA-72qj-48g4-5xgx","id":"tcs_01M5KEHFDNBFKEN5TS38W4K1FC","modified_at":"2026-09-10T03:50:24.589913336Z","published_at":"2025-05-07T17:32:54Z","references":["https://osv.dev/vulnerability/GHSA-72qj-48g4-5xgx","https://github.com/jruby/jruby-openssl/security/advisories/GHSA-72qj-48g4-5xgx","https://nvd.nist.gov/vuln/detail/CVE-2025-46551","https://github.com/jruby/jruby-openssl/commit/31a56d690ce9b8af47af09aaaf809081949ed285","https://github.com/jruby/jruby-openssl/commit/b1fc5d645c0d90891b8865925ac1c15e3f15a055","https://github.com/jruby/jruby-openssl","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/jruby-openssl/CVE-2025-46551.yml"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-72qj-48g4-5xgx","url":"https://osv.dev/vulnerability/GHSA-72qj-48g4-5xgx"},{"source":"nvd","source_id":"CVE-2025-46551","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-46551"}],"summary":"JRuby-OpenSSL has hostname verification disabled by default"}