{"action":"Upgrade org.jruby:jruby to 9.4.12.1 (9.x) or 10.0.0.1 (10.x) or later.","affected":[{"fixed":"10.0.0.1","introduced":"10.0.0.0"},{"fixed":"9.4.12.1","introduced":"9.3.4.0"}],"component":"org.jruby:jruby","cve_ids":["CVE-2025-46551"],"ecosystem":"Maven","epss":0.00201,"exploited":false,"fixed_versions":["10.0.0.1","9.4.12.1"],"ghsa_id":"GHSA-72qj-48g4-5xgx","id":"tcs_01M5N8H5GT9PQ1MRT5KTRDKVNN","modified_at":"2026-09-10T03:50:24.589913336Z","published_at":"2025-05-07T17:32:54Z","references":["https://osv.dev/vulnerability/GHSA-72qj-48g4-5xgx","https://github.com/jruby/jruby-openssl/security/advisories/GHSA-72qj-48g4-5xgx","https://nvd.nist.gov/vuln/detail/CVE-2025-46551","https://github.com/jruby/jruby-openssl/commit/31a56d690ce9b8af47af09aaaf809081949ed285","https://github.com/jruby/jruby-openssl/commit/b1fc5d645c0d90891b8865925ac1c15e3f15a055","https://github.com/jruby/jruby-openssl","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/jruby-openssl/CVE-2025-46551.yml"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-72qj-48g4-5xgx#Maven/org.jruby:jruby","url":"https://osv.dev/vulnerability/GHSA-72qj-48g4-5xgx"},{"source":"nvd","source_id":"CVE-2025-46551","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-46551"}],"summary":"JRuby-OpenSSL has hostname verification disabled by default"}