Summary iPlain-English security verdict for JRuby, generated from its current health score, actively-exploited vulnerabilities, and latest supported version.
JRuby currently scores 100/100 — healthy. No tracked vulnerabilities are currently known to be exploited in the wild. The latest supported release is 10.1.0.0. It's on the latest patch with no significant known issues — keep it current.
Disclosure trend iNew CVEs published for JRuby each year (NVD). A higher bar means more disclosures that year — more scrutiny, not necessarily less safe.
Patch priority — what to act on iThe issues to fix first — actively exploited (CISA KEV) first, then by exploitation probability (EPSS), then severity. Each row's "→ fixed in" is the earliest version that patches it; "see advisory" means no fixed version is published.
No urgent unpatched issues identified. ✓
Get alerted about JRuby
Be emailed the moment JRuby gets a newly exploited vulnerability (CISA KEV) or a release reaches end of life. Free · double opt-in · unsubscribe anytime.
We email only on real events for JRuby — no marketing, no sharing, and we never know what you run. Track your whole stack →
Versions & lifecycle iWhen each release line stops receiving security patches (end-of-life). After EOL there are no more fixes — plan upgrades before these dates.
How long each JRuby release line is supported — and when it sunsets. Select a line for its full report.
Full JRuby end-of-life dates & support timeline →
10.1 latest 10.1.0.0 Supported 10.1.0.0 → 10.0 latest 10.0.6.0 Supported until 2028-04-0110.0.6.0 → 9.4 latest 9.4.15.0 Supported 9.4.15.0 → 9.3 latest 9.3.15.0 End of life ended 2024-06-269.3.15.0 → 9.2 latest 9.2.21.0 End of life ended 2022-06-279.2.21.0 → 9.1 latest 9.1.17.0 End of life ended 2018-04-209.1.17.0 → 9.0 latest 9.0.5.0 End of life ended 2016-01-309.0.5.0 → See all upcoming end-of-life dates →Frequently asked
Is JRuby safe and patched?
JRuby currently scores 100/100 — healthy. No tracked vulnerabilities are currently known to be exploited in the wild. The latest supported release is 10.1.0.0. It's on the latest patch with no significant known issues — keep it current.
What should I do about JRuby now?
Upgrade JRuby to the latest supported release (10.1.0.0) or later and apply available security updates, then confirm against JRuby's official advisory.
When does JRuby reach end-of-life?
The latest supported JRuby release is 10.1.0.0. After end-of-life a release no longer receives security patches.
Which versions of JRuby are still receiving security updates?
Supported JRuby release lines (latest 10.1.0.0): 10.1, 10.0, 9.4. End-of-life releases no longer receive security patches.
Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against JRuby's official advisory before you patch or upgrade — JRuby official site ↗