{"action":"Upgrade org.jruby:jruby-parent to 1.6.5.1 or later.","affected":[{"fixed":"1.6.5.1","introduced":"0"}],"component":"org.jruby:jruby-parent","cve_ids":["CVE-2011-5036"],"ecosystem":"Maven","epss":0.03871,"exploited":false,"fixed_versions":["1.6.5.1"],"ghsa_id":"GHSA-v6j3-7jrw-hq2p","id":"tcs_01M5N9DE3AXPPFG585F7144YGF","modified_at":"2024-11-30T05:29:12.044806Z","published_at":"2022-05-17T04:59:13Z","references":["https://osv.dev/vulnerability/GHSA-v6j3-7jrw-hq2p","https://nvd.nist.gov/vuln/detail/CVE-2011-5036","https://gist.github.com/52bbc6b9cc19ce330829","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2011-5036.yml","https://web.archive.org/web/20120201040317/http://jruby.org/2011/12/27/jruby-1-6-5-1","https://web.archive.org/web/20130213132312/http://archives.neohapsis.com/archives/bugtraq/2011-12/0181.html","http://www.debian.org/security/2013/dsa-2783","http://www.kb.cert.org/vuls/id/903934","http://www.nruns.com/_downloads/advisory28122011.pdf","http://www.ocert.org/advisories/ocert-2011-003.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-v6j3-7jrw-hq2p#Maven/org.jruby:jruby-parent","url":"https://osv.dev/vulnerability/GHSA-v6j3-7jrw-hq2p"}],"summary":"Rack Gem Subject to Denial of Service via Hash Collisions"}