
JRuby
External Program
Submit bugs directly to this organization
Please send an email to [email protected] when you think you have found a security vulnerability in JRuby or one of its associated libraries (such as the jruby-openssl gem). We will do our best to respond to you within 72 hours and work with you to fix and properly disclose the nature of the vulnerability. Please note that [email protected] is a private email address and email sent to it will not result in public disclosure.
The JRuby team will endeavor to follow these steps when handling reported vulnerabilities: