rexml (RubyGems)
Advisories
8
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 3.4.2 or later clears every advisory below that has a fix.
Upgrade commands
bundler
bundle update rexml # Gemfile: gem "rexml", ">= 3.4.2"Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-c2f4-jgmc-q2r5 REXML has DoS condition when parsing malformed XML file |
Medium EPSS 0.25% |
>= 3.3.3, < 3.4.2 | 3.4.2 |
| GHSA-2rxp-v6pw-ch6m REXML ReDoS vulnerability |
High EPSS 1.42% |
< 3.3.9 | 3.3.9 |
| GHSA-vmwr-mc7x-5vc3 REXML denial of service vulnerability |
Medium EPSS 1.21% |
< 3.3.6 | 3.3.6 |
| GHSA-5866-49gr-22v4 REXML DoS vulnerability |
High EPSS 1.19% |
< 3.3.3 | 3.3.3 |
| GHSA-r55c-59qm-vjw6 REXML DoS vulnerability |
High EPSS 1.28% |
< 3.3.3 | 3.3.3 |
| GHSA-4xqq-m2hx-25v8 REXML denial of service vulnerability |
Medium EPSS 1.49% |
< 3.3.2 | 3.3.2 |
| GHSA-vg3r-rm7w-2xgh REXML contains a denial of service vulnerability |
Medium EPSS 2.06% |
< 3.2.7 | 3.2.7 |
| GHSA-8cr8-4vfw-mr7h REXML round-trip instability |
High EPSS 5.06% |
< 3.2.5 | 3.2.5 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor