Skip to main content
cve.nowby Sazabi
← RubyGems
RubyGemsPackage

rexml

9 known vulnerabilities (1 high, 6 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
9 · 1 high, 6 medium, 1 low
Registry
RubyGems

Advisories 9

  • Rexml: rexml: denial of service via inefficient regex parsing

    Affected: fixed in 3.3.9.

  • REXML has a DoS condition when parsing malformed XML file

    Affected: from 3.3.3, fixed in 3.4.2.

  • CVE-2024-49761Medium 6.6

    REXML ReDoS vulnerability

    Affected: fixed in 3.3.9.

  • CVE-2024-43398Medium 5.9

    REXML denial of service vulnerability

    Affected: fixed in 3.3.6.

  • CVE-2024-41946Medium 5.3

    REXML DoS vulnerability

    Affected: fixed in 3.3.3.

  • CVE-2024-41123Medium 5.3

    REXML DoS vulnerability

    Affected: fixed in 3.3.3.

  • CVE-2024-39908Medium 4.3

    Denial of service in REXML

    Affected: fixed in 3.3.2.

  • CVE-2024-35176Medium 5.3

    REXML contains a denial of service vulnerability

    Affected: fixed in 3.2.7.

  • The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues.

    Affected: fixed in 3.2.5.