CVE-2010-1330
jruby jruby: no CVSS score yet. EPSS 2.2% chance of exploitation in the next 30 days. Fixed in org.jruby:jruby-core 1.4.1.
The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not properly handle characters immediately after a UTF-8 character, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted string.
- EPSS
- 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- jruby:jruby
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-wmq2-jc9m-xp4m | Maven | org.jruby:jruby-core | <1.4.1 | 1.4.1 |