{"action":"Upgrade org.jruby:jruby-parent to 1.7.1 or later.","affected":[{"fixed":"1.7.1","introduced":"0"}],"component":"org.jruby:jruby-parent","cve_ids":["CVE-2012-5370"],"ecosystem":"Maven","epss":0.02249,"exploited":false,"fixed_versions":["1.7.1"],"ghsa_id":"GHSA-fmmq-j7pq-f85c","id":"tcs_01M5N8WBJQYPAP3NFQ0TSM8EQ4","modified_at":"2026-09-10T03:49:22.538651849Z","published_at":"2022-05-17T04:17:07Z","references":["https://osv.dev/vulnerability/GHSA-fmmq-j7pq-f85c","https://nvd.nist.gov/vuln/detail/CVE-2012-5370","https://github.com/jruby/jruby/commit/5e4aab28b26fd127112b76fabfac9a33b64caf77","https://bugzilla.redhat.com/show_bug.cgi?id=880671","http://jruby.org/2012/12/03/jruby-1-7-1","http://rhn.redhat.com/errata/RHSA-2013-0533.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-fmmq-j7pq-f85c","url":"https://osv.dev/vulnerability/GHSA-fmmq-j7pq-f85c"}],"summary":"JRuby denial of service via Hash Collision"}