The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-abrtUpgrade rubygem-pg-docUpgrade rubygem-mongo-docUpgrade rubygem-mysql2-docUpgrade rubygem-bson-docUpgrade rubygem-mongoUpgrade rubygem-pgUpgrade rubygem-mysql2Upgrade rubygem-bsonUpgrade rubygem-abrt-doc | May 4, 2022 | Apr 21, 2021 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | Apr 21, 2021 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-psychUpgrade rubygem-net-telnetUpgrade rubygem-io-consoleUpgrade rubygem-typeprofUpgrade ruby-debuginfoUpgrade rubygem-rexmlUpgrade rubygem-rakeUpgrade rubygem-test-unitUpgrade rubygems-develUpgrade rubygem-xmlrpcUpgrade ruby-libsUpgrade rubygem-bigdecimalUpgrade rubygemsUpgrade rubygem-bundlerUpgrade rubygem-power_assertUpgrade rubygem-rdocUpgrade rubygem-irbUpgrade rubygem-rbsUpgrade ruby-tcltkUpgrade rubygem-jsonUpgrade rubygem-did_you_meanUpgrade rubygem-opensslUpgrade ruby-irbUpgrade ruby-develUpgrade rubygem-minitestUpgrade rubyUpgrade ruby-default-gemsUpgrade ruby-docUpgrade rubygem-rss | Sep 28, 2023 | Apr 21, 2021 |
| Amazon_linux | — | Upgrade ruby24 | May 20, 2021 | Apr 20, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 21, 2021 |
| Centos_linux | — | Upgrade rubygem-mysql2-debugsourceUpgrade ruby-debuginfoUpgrade rubygem-rakeUpgrade rubygem-mysql2-docUpgrade rubygem-json-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-bson-docUpgrade rubygem-mongo-docUpgrade rubygem-pg-debuginfoUpgrade rubygem-did_you_meanUpgrade rubygem-bigdecimalUpgrade rubygem-test-unitUpgrade rubygem-abrt-docUpgrade rubygem-io-consoleUpgrade rubygem-xmlrpcUpgrade rubygem-mongoUpgrade rubygems-develUpgrade rubygem-io-console-debuginfoUpgrade rubygem-rdocUpgrade rubygem-bson-debugsourceUpgrade rubygem-abrtUpgrade rubygem-pg-docUpgrade rubygem-jsonUpgrade ruby-docUpgrade rubygem-minitestUpgrade ruby-default-gemsUpgrade rubygem-power_assertUpgrade ruby-develUpgrade rubygem-bson-debuginfoUpgrade rubygem-bundler-docUpgrade ruby-libsUpgrade rubygem-openssl-debuginfoUpgrade rubygem-irbUpgrade rubygem-pg-debugsourceUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-pgUpgrade rubygem-net-telnetUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-psychUpgrade rubygem-mysql2Upgrade rubygem-bundlerUpgrade ruby-libs-debuginfoUpgrade rubyUpgrade rubygem-opensslUpgrade rubygemsUpgrade rubygem-bsonUpgrade ruby-irbUpgrade rubygem-psych-debuginfo | Jun 30, 2021 | Apr 21, 2021 |
| Debian | — | Upgrade ruby2.7 | Feb 7, 2022 | Apr 21, 2021 |
| Freebsd | — | Upgrade rubygem-rexmlUpgrade gitlab-ceUpgrade ruby | Nov 4, 2022 | Apr 15, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-libs | Jun 28, 2021 | Apr 21, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade rubyUpgrade ruby-helpUpgrade ruby-irb | Aug 10, 2021 | Apr 21, 2021 |
| Oracle Solaris | — | Upgrade runtime/ruby-25 to version 2.5.9-11.4.35.0.1.94.2 on Solaris 11.4Upgrade runtime/ruby-26 to version 2.6.7-11.4.35.0.1.94.2 on Solaris 11.4 | Jul 21, 2021 | Apr 21, 2021 |
| Oracle_linux | — | Upgrade rubygem-psychUpgrade rubygem-test-unitUpgrade rubygem-bigdecimalUpgrade rubygem-xmlrpcUpgrade ruby-libsUpgrade rubygem-bson-docUpgrade rubygem-abrt-docUpgrade rubygem-io-consoleUpgrade rubygem-rakeUpgrade ruby-irbUpgrade rubygems-develUpgrade rubygem-did_you_meanUpgrade rubygem-mongo-docUpgrade rubygem-mysql2-docUpgrade rubyUpgrade rubygem-rdocUpgrade rubygem-pg-docUpgrade rubygem-abrtUpgrade rubygem-bsonUpgrade rubygem-jsonUpgrade rubygem-bundlerUpgrade rubygem-pgUpgrade rubygem-mysql2Upgrade rubygem-irbUpgrade rubygem-power_assertUpgrade ruby-default-gemsUpgrade rubygemsUpgrade ruby-docUpgrade rubygem-mongoUpgrade ruby-develUpgrade rubygem-opensslUpgrade rubygem-bundler-docUpgrade rubygem-net-telnetUpgrade rubygem-minitest | Jul 2, 2021 | Apr 5, 2021 |
| Redhat_linux | — | Upgrade ruby-default-gemsUpgrade rubygem-io-consoleUpgrade rubygem-mongo-docUpgrade rubygem-bson-debugsourceUpgrade rubygem-rakeUpgrade ruby-docUpgrade ruby-libsUpgrade rubygem-mysql2Upgrade rubygem-minitestUpgrade rubygem-bsonUpgrade rubygem-power_assertUpgrade rubygem-irbNo solution existsUpgrade rubygem-abrtUpgrade rubygem-bundlerUpgrade rubygem-pg-debuginfoUpgrade rubygem-pgUpgrade rubygem-bson-debuginfoUpgrade rubygem-mongoUpgrade rubyUpgrade rubygem-jsonUpgrade ruby-debugsourceUpgrade rubygem-openssl-debuginfoUpgrade rubygem-abrt-docUpgrade rubygem-did_you_meanUpgrade rubygem-pg-debugsourceUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-pg-docUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-psychUpgrade rubygem-mysql2-docUpgrade rubygem-net-telnetUpgrade rubygem-xmlrpcUpgrade rubygem-json-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-opensslUpgrade rubygem-test-unitUpgrade ruby-debuginfoUpgrade rubygemsUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bigdecimalUpgrade ruby-irbUpgrade rubygem-io-console-debuginfoUpgrade rubygem-psych-debuginfoUpgrade ruby-develUpgrade rubygem-bson-docUpgrade rubygem-bundler-docUpgrade rubygem-rdocUpgrade rubygems-devel | Jun 30, 2021 | Apr 21, 2021 |
| Rocky_linux | — | Upgrade ruby-develUpgrade rubygem-io-consoleUpgrade rubygem-bsonUpgrade ruby-debugsourceUpgrade rubygem-bson-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-io-console-debuginfoUpgrade rubyUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-pg-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-jsonUpgrade ruby-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-mysql2Upgrade ruby-libsUpgrade ruby-libs-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-pgUpgrade rubygem-psychUpgrade rubygem-openssl | May 5, 2022 | Apr 21, 2021 |
| Suse | — | Upgrade ruby2.5-develUpgrade ruby2.5Upgrade ruby2.5-doc-riUpgrade ruby2.5-docUpgrade ruby2.5-stdlibUpgrade libruby2_5-2_5Upgrade ruby2.5-devel-extra | Apr 25, 2021 | Apr 20, 2021 |
| Ubuntu | — | Upgrade libruby2.5Upgrade ruby2.7Upgrade ruby2.3Upgrade libruby2.7Upgrade ruby2.5Upgrade libruby2.3 | Apr 21, 2021 | Apr 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub