Rexml (Ruby-lang) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 30 known versions, newest CVE from 2025-09-17. Vendor: Ruby-lang.

CVEs of Rexml

• CVE-2025-58767 - CVSS 5.3 (medium), 2025-09-17: REXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 to 3.4.1 has a DoS vulnerability when parsing XML containing multiple XML declarations. If you…
• CVE-2024-49761 - CVSS 7.5 (high), 2024-10-28: REXML is an XML toolkit for Ruby. The REXML gem before 3.3.9 has a ReDoS vulnerability when it parses an XML that has many digits between &# and x...; in a…
• CVE-2024-43398 - CVSS 5.9 (medium), 2024-08-22: REXML is an XML toolkit for Ruby. The REXML gem before 3.3.6 has a DoS vulnerability when it parses an XML that has many deep elements that have same local…
• CVE-2024-41946 - CVSS 7.5 (high), 2024-08-01: REXML is an XML toolkit for Ruby. The REXML gem 3.3.2 has a DoS vulnerability when it parses an XML that has many entity expansions with SAX2 or pull parser…
• CVE-2024-41123 - CVSS 7.5 (high), 2024-08-01: REXML is an XML toolkit for Ruby. The REXML gem before 3.3.2 has some DoS vulnerabilities when it parses an XML that has many specific characters such as…
• CVE-2024-39908 - CVSS 4.3 (medium), 2024-07-16: REXML is an XML toolkit for Ruby. The REXML gem before 3.3.1 has some DoS vulnerabilities when it parses an XML that has many specific characters such as `<`,…
• CVE-2024-35176 - CVSS 5.3 (medium), 2024-05-16: REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many `<`s in an attribute…
• CVE-2021-28965 - CVSS 7.5 (high), 2021-04-21: The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect…