The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
REXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 to 3.4.1 has a DoS vulnerability when parsing XML containing multiple XML declarations. If you need to parse untrusted XMLs, you may be impacted to these vulnerabilities. The REXML gem 3.4.2 or later include the patches to fix these vulnerabilities.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-minitestUpgrade rubygem-rbsUpgrade rubygem-rssUpgrade rubygem-mysql2-docUpgrade rubyUpgrade rubygem-abrtUpgrade rubygemsUpgrade ruby-bundled-gemsUpgrade rubygem-bundlerUpgrade rubygem-rdocUpgrade rubygem-typeprofUpgrade rubygem-mysql2Upgrade rubygem-irbUpgrade rubygem-power_assertUpgrade rubygem-pgUpgrade rubygem-jsonUpgrade ruby-develUpgrade ruby-default-gemsUpgrade rubygem-pg-docUpgrade ruby-libsUpgrade rubygem-test-unitUpgrade rubygems-develUpgrade rubygem-raccUpgrade rubygem-abrt-docUpgrade ruby-docUpgrade rubygem-rexmlUpgrade rubygem-psychUpgrade rubygem-rakeUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimal | Jan 8, 2026 | Dec 10, 2025 |
| Alpine Linux | — | Upgrade ruby-rexml | Jan 7, 2026 | Sep 17, 2025 |
| Amazon_linux_2023 | — | Upgrade ruby3.2-debugsourceUpgrade ruby3.2-default-gemsUpgrade ruby3.2-rubygem-jsonUpgrade ruby3.2Upgrade ruby3.2-rubygem-json-debuginfoUpgrade ruby3.2-debuginfoUpgrade ruby3.2-rubygem-bigdecimalUpgrade ruby3.2-rubygem-psych-debuginfoUpgrade ruby3.2-rubygem-rdocUpgrade ruby3.2-rubygem-rexmlUpgrade ruby3.2-develUpgrade ruby3.2-libs-debuginfoUpgrade ruby3.2-rubygems-develUpgrade ruby3.2-rubygem-typeprofUpgrade ruby3.2-docUpgrade ruby3.2-rubygem-io-console-debuginfoUpgrade ruby3.2-rubygem-bigdecimal-debuginfoUpgrade ruby3.2-rubygem-rbs-debuginfoUpgrade ruby3.2-rubygem-rbsUpgrade ruby3.2-rubygem-test-unitUpgrade ruby3.2-rubygem-minitestUpgrade ruby3.2-bundled-gemsUpgrade ruby3.2-rubygemsUpgrade ruby3.2-rubygem-rssUpgrade ruby3.2-rubygem-psychUpgrade ruby3.2-libsUpgrade ruby3.2-bundled-gems-debuginfoUpgrade ruby3.2-rubygem-power_assertUpgrade ruby3.2-rubygem-rakeUpgrade ruby3.2-rubygem-irbUpgrade ruby3.2-rubygem-io-consoleUpgrade ruby3.2-rubygem-bundler | Sep 30, 2025 | Sep 17, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade rubygem-bigdecimalUpgrade rubygem-did_you_meanUpgrade rubygem-io-consoleUpgrade ruby-helpUpgrade rubygem-rdocUpgrade rubygemsUpgrade rubygem-psychUpgrade rubygem-opensslUpgrade rubyUpgrade rubygem-jsonUpgrade ruby-irb | Mar 17, 2026 | Mar 16, 2026 |
| Oracle_linux | — | Upgrade rubygem-test-unitUpgrade rubygem-power_assertUpgrade rubygem-bundlerUpgrade rubygem-pgUpgrade ruby-develUpgrade rubygem-minitestUpgrade rubygem-mysql2-docUpgrade rubygem-rakeUpgrade rubygem-rdocUpgrade rubygem-irbUpgrade rubygem-raccUpgrade rubygems-develUpgrade ruby-default-gemsUpgrade rubygem-rssUpgrade rubygem-jsonUpgrade ruby-docUpgrade rubygem-rexmlUpgrade rubygem-typeprofUpgrade rubygem-mysql2Upgrade rubyUpgrade ruby-bundled-gemsUpgrade rubygem-bigdecimalUpgrade rubygem-psychUpgrade rubygem-rbsUpgrade rubygem-abrt-docUpgrade ruby-libsUpgrade rubygem-abrtUpgrade rubygemsUpgrade rubygem-pg-docUpgrade rubygem-io-console | Dec 15, 2025 | Sep 17, 2025 |
| Redhat_linux | — | Upgrade rubygem-rdocUpgrade rubygem-test-unitUpgrade rubygem-json-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-raccUpgrade rubygem-typeprofUpgrade ruby-debugsourceUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-io-console-debuginfoUpgrade ruby-debuginfoUpgrade rubygems-develUpgrade rubygem-abrt-docUpgrade rubygem-mysql2-docUpgrade rubygem-pg-debuginfoUpgrade rubygem-rbs-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-psych-debuginfoUpgrade rubygem-racc-debuginfoUpgrade rubygem-rexmlUpgrade rubygem-rakeUpgrade rubygem-irbUpgrade rubygem-pg-debugsourceUpgrade rubygem-abrtUpgrade rubygem-power_assertUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygemsUpgrade ruby-default-gemsUpgrade rubyUpgrade rubygem-pg-docUpgrade rubygem-psychUpgrade rubygem-bundlerUpgrade rubygem-rbsUpgrade rubygem-jsonUpgrade ruby-docUpgrade ruby-bundled-gemsUpgrade rubygem-minitestUpgrade rubygem-mysql2Upgrade ruby-develUpgrade ruby-libs-debuginfoUpgrade ruby-bundled-gems-debuginfoUpgrade ruby-libsUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-pgNo solution existsUpgrade rubygem-rss | Dec 15, 2025 | Sep 17, 2025 |
| Rocky_linux | — | Upgrade rubygem-racc-debuginfoUpgrade rubygem-rbsUpgrade rubygem-psych-debuginfoUpgrade ruby-develUpgrade rubygem-raccUpgrade rubygem-pgUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubyUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-mysql2Upgrade ruby-debugsourceUpgrade rubygem-rbs-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade ruby-libsUpgrade rubygem-psychUpgrade rubygem-pg-debuginfoUpgrade ruby-debuginfoUpgrade ruby-bundled-gemsUpgrade rubygem-json-debuginfoUpgrade rubygem-jsonUpgrade rubygem-mysql2-debugsource | Feb 5, 2026 | Jan 3, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Sep 17, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub