Skip to content
OpenAdvisories

Vendor

ruby

35 known vulnerabilities.

Products

net-imap 10 rexml 7 Ruby 5 json 4 resolv 3 Nokogiri gem 2 WEBrick 1 zlib 1 erb 1 uri 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-39908 Public exploit

    Denial of service in REXML

    REXML is an XML toolkit for Ruby. The REXML gem before 3.3.1 has some DoS vulnerabilities when it parses an XML that has many specific characters such as `<`, `0` and `%>`. If you need to parse untrusted XMLs, you many be impacted to these vulnerabilities. Th…

    ruby rexml ruby2.3 ruby2.5 Debian Ubuntu Alpine RubyGems
  • Medium 5.3
    CVE-2024-35176 Public exploit

    REXML contains a denial of service vulnerability

    REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many `<`s in an attribute value. Those who need to parse untrusted XMLs may be impacted to this vulnerability. The REXML gem 3.2.…

    ruby rexml ruby2.3 ruby2.5 Debian Ubuntu RubyGems