{"action":"Upgrade org.jruby:jruby to 1.7.3 or later.","affected":[{"fixed":"1.7.3","introduced":"0"}],"component":"org.jruby:jruby","cve_ids":["CVE-2013-1821"],"ecosystem":"Maven","exploited":false,"fixed_versions":["1.7.3"],"ghsa_id":"GHSA-hgg7-cghq-xhf4","id":"tcs_01M5N90KWRZP75K241WF4ZP3BB","modified_at":"2024-11-29T05:38:00.378634Z","published_at":"2022-05-17T03:23:26Z","references":["https://osv.dev/vulnerability/GHSA-hgg7-cghq-xhf4","https://nvd.nist.gov/vuln/detail/CVE-2013-1821","https://bugzilla.redhat.com/show_bug.cgi?id=914716","https://github.com/jruby/jruby","https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0092","https://www.jruby.org/2013/02/21/jruby-1-7-3.html","http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=702525","http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00001.html","http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00015.html","http://lists.opensuse.org/opensuse-updates/2013-04/msg00034.html","http://lists.opensuse.org/opensuse-updates/2013-04/msg00036.html","http://rhn.redhat.com/errata/RHSA-2013-1147.html","http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=revision&revision=39384","http://www.debian.org/security/2013/dsa-2738","http://www.debian.org/security/2013/dsa-2809","http://www.mandriva.com/security/advisories?name=MDVSA-2013:124","http://www.openwall.com/lists/oss-security/2013/03/06/5","http://www.ruby-lang.org/en/news/2013/02/22/rexml-dos-2013-02-22","http://www.slackware.com/security/viewer.php?l=slackware-security&y=2013&m=slackware-security.426862","http://www.ubuntu.com/usn/USN-1780-1"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-hgg7-cghq-xhf4","url":"https://osv.dev/vulnerability/GHSA-hgg7-cghq-xhf4"}],"summary":"Ruby vulnerable to denial of service"}