The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-bson-docUpgrade rubygem-mysql2Upgrade rubygem-mongoUpgrade rubygem-pgUpgrade rubygem-abrt-docUpgrade rubygem-bsonUpgrade rubygem-pg-docUpgrade rubygem-mysql2-docUpgrade rubygem-abrtUpgrade rubygem-mongo-doc | May 4, 2022 | Apr 21, 2021 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | Apr 21, 2021 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-power_assertUpgrade ruby-default-gemsUpgrade rubygemsUpgrade rubygem-rbsUpgrade rubygem-bundlerUpgrade rubygem-rdocUpgrade rubygem-jsonUpgrade rubygem-opensslUpgrade ruby-irbUpgrade rubygem-minitestUpgrade ruby-tcltkUpgrade rubygem-rssUpgrade ruby-docUpgrade rubygem-irbUpgrade rubygem-did_you_meanUpgrade rubyUpgrade ruby-develUpgrade rubygem-typeprofUpgrade ruby-debuginfoUpgrade rubygems-develUpgrade rubygem-bigdecimalUpgrade ruby-libsUpgrade rubygem-xmlrpcUpgrade rubygem-psychUpgrade rubygem-io-consoleUpgrade rubygem-rexmlUpgrade rubygem-test-unitUpgrade rubygem-rakeUpgrade rubygem-net-telnet | Sep 28, 2023 | Apr 21, 2021 |
| Amazon_linux | — | Upgrade ruby24 | May 20, 2021 | Apr 20, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 21, 2021 |
| Centos_linux | — | Upgrade rubygem-pg-docUpgrade ruby-irbUpgrade rubygem-bson-debugsourceUpgrade rubygem-mongoUpgrade rubygem-bsonUpgrade ruby-libs-debuginfoUpgrade rubyUpgrade rubygem-mysql2Upgrade rubygem-psychUpgrade rubygem-opensslUpgrade rubygem-bundlerUpgrade ruby-docUpgrade rubygem-irbUpgrade rubygem-abrtUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-pgUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-minitestUpgrade rubygem-pg-debugsourceUpgrade rubygem-net-telnetUpgrade rubygem-bundler-docUpgrade rubygem-openssl-debuginfoUpgrade ruby-default-gemsUpgrade rubygem-json-debuginfoUpgrade rubygems-develUpgrade rubygem-io-console-debuginfoUpgrade ruby-libsUpgrade rubygem-rakeUpgrade ruby-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bson-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-xmlrpcUpgrade rubygem-bigdecimalUpgrade rubygem-psych-debuginfoUpgrade rubygem-rdocUpgrade rubygem-jsonUpgrade ruby-develUpgrade rubygem-mysql2-docUpgrade rubygem-test-unitUpgrade rubygem-abrt-docUpgrade rubygem-mongo-docUpgrade rubygem-bson-docUpgrade rubygem-did_you_meanUpgrade ruby-debugsourceUpgrade rubygems | Jun 30, 2021 | Apr 21, 2021 |
| Debian | — | Upgrade ruby2.7 | Feb 7, 2022 | Apr 21, 2021 |
| Freebsd | — | Upgrade rubygem-rexmlUpgrade gitlab-ceUpgrade ruby | Nov 4, 2022 | Apr 15, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-libsUpgrade rubyUpgrade ruby-irb | Jun 28, 2021 | Apr 21, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ruby-helpUpgrade ruby-irbUpgrade ruby | Aug 10, 2021 | Apr 21, 2021 |
| Oracle Solaris | — | Upgrade runtime/ruby-25 to version 2.5.9-11.4.35.0.1.94.2 on Solaris 11.4Upgrade runtime/ruby-26 to version 2.6.7-11.4.35.0.1.94.2 on Solaris 11.4 | Jul 21, 2021 | Apr 21, 2021 |
| Oracle_linux | — | Upgrade rubygems-develUpgrade rubygem-bson-docUpgrade rubygem-rakeUpgrade rubygem-psychUpgrade ruby-irbUpgrade rubygem-did_you_meanUpgrade rubygem-xmlrpcUpgrade rubygem-mongo-docUpgrade ruby-libsUpgrade rubygem-bigdecimalUpgrade rubygem-io-consoleUpgrade rubygem-test-unitUpgrade rubygem-abrt-docUpgrade ruby-docUpgrade rubygem-bundlerUpgrade rubygem-abrtUpgrade rubygem-pg-docUpgrade rubygem-mysql2Upgrade rubygem-rdocUpgrade rubygem-pgUpgrade rubygem-irbUpgrade rubygem-bsonUpgrade rubygem-jsonUpgrade rubyUpgrade ruby-default-gemsUpgrade rubygem-power_assertUpgrade rubygem-net-telnetUpgrade ruby-develUpgrade rubygem-mongoUpgrade rubygem-opensslUpgrade rubygem-mysql2-docUpgrade rubygemsUpgrade rubygem-minitestUpgrade rubygem-bundler-doc | Jul 2, 2021 | Apr 5, 2021 |
| Redhat_linux | — | Upgrade rubygem-net-telnetUpgrade ruby-libs-debuginfoUpgrade ruby-develUpgrade ruby-irbUpgrade rubygem-bundler-docUpgrade ruby-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-opensslUpgrade rubygem-xmlrpcUpgrade rubygem-json-debuginfoUpgrade rubygem-test-unitUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-mysql2-docUpgrade rubygem-io-console-debuginfoUpgrade rubygem-bson-docUpgrade rubygemsUpgrade rubygem-rdocUpgrade rubygems-develUpgrade rubygem-bigdecimalUpgrade rubygem-jsonUpgrade rubygem-mysql2Upgrade ruby-libsUpgrade rubygem-minitestUpgrade rubygem-bson-debuginfoUpgrade rubygem-pg-docUpgrade rubygem-pg-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-bson-debugsourceUpgrade rubyUpgrade rubygem-abrtUpgrade rubygem-pgNo solution existsUpgrade rubygem-bundlerUpgrade rubygem-irbUpgrade rubygem-mongoUpgrade rubygem-rakeUpgrade rubygem-io-consoleUpgrade ruby-docUpgrade rubygem-mongo-docUpgrade rubygem-did_you_meanUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-openssl-debuginfoUpgrade rubygem-abrt-docUpgrade rubygem-psychUpgrade rubygem-pg-debugsourceUpgrade rubygem-bsonUpgrade ruby-default-gemsUpgrade ruby-debugsourceUpgrade rubygem-bigdecimal-debuginfo | Jun 30, 2021 | Apr 21, 2021 |
| Rocky_linux | — | Upgrade rubygem-bigdecimalUpgrade ruby-debugsourceUpgrade rubyUpgrade rubygem-openssl-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bsonUpgrade rubygem-pg-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade ruby-develUpgrade rubygem-io-consoleUpgrade ruby-debuginfoUpgrade rubygem-jsonUpgrade rubygem-bson-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-opensslUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-bson-debugsourceUpgrade ruby-libsUpgrade rubygem-psych-debuginfoUpgrade rubygem-psychUpgrade rubygem-pgUpgrade ruby-libs-debuginfoUpgrade rubygem-mysql2 | May 5, 2022 | Apr 21, 2021 |
| Suse | — | Upgrade ruby2.5-stdlibUpgrade ruby2.5-docUpgrade ruby2.5-doc-riUpgrade ruby2.5-devel-extraUpgrade libruby2_5-2_5Upgrade ruby2.5Upgrade ruby2.5-devel | Apr 25, 2021 | Apr 20, 2021 |
| Ubuntu | — | Upgrade libruby2.7Upgrade ruby2.3Upgrade ruby2.5Upgrade libruby2.3Upgrade ruby2.7Upgrade libruby2.5 | Apr 21, 2021 | Apr 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub