Vulnerabilities affecting this package (1)
| Vulnerability |
Summary |
Fixed by |
VCID-c5xq-bv4t-73ff
Aliases:
CVE-2024-35176
GHSA-vg3r-rm7w-2xgh
|
REXML contains a denial of service vulnerability
### Impact
The REXML gem before 3.2.6 has a DoS vulnerability when it parses an XML that has many `>`s in an attribute value.
If you need to parse untrusted XMLs, you may be impacted to this vulnerability.
### Patches
The REXML gem 3.2.7 or later include the patch to fix this vulnerability.
### Workarounds
Don't parse untrusted XMLs.
### References
* https://www.ruby-lang.org/en/news/2024/05/16/dos-rexml-cve-2024-35176/
|
There are no reported fixed by versions.
|
Vulnerabilities fixed by this package (0)
| Vulnerability |
Summary |
Aliases |
|
This package is not known to fix vulnerabilities.
|