The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-abrtUpgrade rubygem-mysql2-docUpgrade rubygem-pg-docUpgrade rubygem-mongo-docUpgrade rubygem-pgUpgrade rubygem-bsonUpgrade rubygem-bson-docUpgrade rubygem-mongoUpgrade rubygem-mysql2Upgrade rubygem-abrt-doc | May 4, 2022 | Apr 21, 2021 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | Apr 21, 2021 |
| Amazon Linux Ami 2 | — | Upgrade ruby-develUpgrade rubygem-irbUpgrade ruby-irbUpgrade rubyUpgrade rubygem-minitestUpgrade ruby-docUpgrade rubygem-jsonUpgrade ruby-default-gemsUpgrade rubygem-opensslUpgrade ruby-tcltkUpgrade rubygem-power_assertUpgrade rubygem-did_you_meanUpgrade rubygem-rssUpgrade rubygem-rbsUpgrade rubygemsUpgrade rubygem-bundlerUpgrade rubygem-rdocUpgrade rubygem-io-consoleUpgrade rubygem-test-unitUpgrade rubygem-bigdecimalUpgrade rubygem-rakeUpgrade rubygem-net-telnetUpgrade rubygems-develUpgrade rubygem-rexmlUpgrade ruby-debuginfoUpgrade rubygem-typeprofUpgrade rubygem-xmlrpcUpgrade ruby-libsUpgrade rubygem-psych | Sep 28, 2023 | Apr 21, 2021 |
| Amazon_linux | — | Upgrade ruby24 | May 20, 2021 | Apr 20, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 21, 2021 |
| Centos_linux | — | Upgrade rubygem-bsonUpgrade ruby-irbUpgrade ruby-default-gemsUpgrade rubygem-power_assertUpgrade rubygem-openssl-debuginfoUpgrade ruby-libsUpgrade rubygem-bundler-docUpgrade rubygem-mongoUpgrade rubygem-bson-debugsourceUpgrade rubygem-opensslUpgrade rubygem-minitestUpgrade ruby-docUpgrade ruby-develUpgrade ruby-libs-debuginfoUpgrade rubygem-bundlerUpgrade rubygem-mysql2Upgrade rubygem-psychUpgrade rubyUpgrade rubygemsUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-irbUpgrade rubygem-pgUpgrade rubygem-net-telnetUpgrade rubygem-abrtUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-pg-docUpgrade rubygem-bson-debuginfoUpgrade rubygem-jsonUpgrade rubygem-mongo-docUpgrade ruby-debugsourceUpgrade ruby-debuginfoUpgrade rubygem-bson-docUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-rakeUpgrade rubygem-bigdecimalUpgrade rubygem-xmlrpcUpgrade rubygem-pg-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-mysql2-docUpgrade rubygem-json-debuginfoUpgrade rubygems-develUpgrade rubygem-did_you_meanUpgrade rubygem-abrt-docUpgrade rubygem-io-console-debuginfoUpgrade rubygem-rdocUpgrade rubygem-psych-debuginfoUpgrade rubygem-test-unit | Jun 30, 2021 | Apr 21, 2021 |
| Debian | — | Upgrade ruby2.7 | Feb 7, 2022 | Apr 21, 2021 |
| Freebsd | — | Upgrade rubyUpgrade gitlab-ceUpgrade rubygem-rexml | Nov 4, 2022 | Apr 15, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-irbUpgrade rubyUpgrade ruby-libs | Jun 28, 2021 | Apr 21, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | Aug 10, 2021 | Apr 21, 2021 |
| Oracle Solaris | — | Upgrade runtime/ruby-25 to version 2.5.9-11.4.35.0.1.94.2 on Solaris 11.4Upgrade runtime/ruby-26 to version 2.6.7-11.4.35.0.1.94.2 on Solaris 11.4 | Jul 21, 2021 | Apr 21, 2021 |
| Oracle_linux | — | Upgrade rubygem-pgUpgrade rubygem-power_assertUpgrade rubygem-abrtUpgrade rubygem-mysql2-docUpgrade rubygem-mongoUpgrade rubygem-irbUpgrade ruby-develUpgrade rubygem-mysql2Upgrade rubygem-opensslUpgrade rubygem-net-telnetUpgrade rubygem-bundlerUpgrade rubygemsUpgrade rubygem-bsonUpgrade ruby-default-gemsUpgrade rubygem-rdocUpgrade rubygem-jsonUpgrade rubyUpgrade ruby-docUpgrade rubygem-pg-docUpgrade rubygem-minitestUpgrade rubygem-bundler-docUpgrade rubygem-psychUpgrade rubygem-abrt-docUpgrade ruby-libsUpgrade rubygems-develUpgrade rubygem-did_you_meanUpgrade rubygem-io-consoleUpgrade rubygem-rakeUpgrade rubygem-mongo-docUpgrade rubygem-bson-docUpgrade rubygem-bigdecimalUpgrade rubygem-test-unitUpgrade ruby-irbUpgrade rubygem-xmlrpc | Jul 2, 2021 | Apr 5, 2021 |
| Redhat_linux | — | Upgrade rubygem-bigdecimalUpgrade ruby-irbUpgrade rubygem-bundler-docUpgrade rubygem-rdocUpgrade ruby-develUpgrade rubygem-opensslUpgrade rubygem-net-telnetUpgrade rubygemsUpgrade ruby-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-test-unitUpgrade rubygem-json-debuginfoUpgrade rubygem-xmlrpcUpgrade rubygem-psych-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-bson-docUpgrade rubygem-mysql2-docUpgrade rubygem-io-console-debuginfoUpgrade rubygems-develUpgrade rubygem-power_assertUpgrade rubygem-bundlerUpgrade rubygem-pg-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-irbUpgrade rubygem-openssl-debuginfoUpgrade ruby-default-gemsUpgrade rubygem-mongoUpgrade ruby-debugsourceUpgrade rubygem-abrt-docUpgrade rubygem-mongo-docUpgrade rubygem-mysql2Upgrade rubygem-rakeUpgrade ruby-libsUpgrade rubyUpgrade rubygem-bson-debugsourceUpgrade rubygem-did_you_meanUpgrade rubygem-io-consoleUpgrade rubygem-psychUpgrade rubygem-bsonUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-pg-docUpgrade rubygem-jsonUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-pgUpgrade rubygem-abrtNo solution existsUpgrade ruby-docUpgrade rubygem-minitest | Jun 30, 2021 | Apr 21, 2021 |
| Rocky_linux | — | Upgrade ruby-libs-debuginfoUpgrade rubygem-psychUpgrade ruby-libsUpgrade rubygem-bson-debugsourceUpgrade rubygem-opensslUpgrade rubygem-pg-debugsourceUpgrade rubygem-psych-debuginfoUpgrade rubygem-pgUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-mysql2-debuginfoUpgrade rubygem-bsonUpgrade rubygem-io-consoleUpgrade rubygem-pg-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-bigdecimalUpgrade ruby-develUpgrade rubyUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-jsonUpgrade rubygem-json-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-io-console-debuginfo | May 5, 2022 | Apr 21, 2021 |
| Suse | — | Upgrade ruby2.5-develUpgrade ruby2.5Upgrade ruby2.5-docUpgrade ruby2.5-devel-extraUpgrade ruby2.5-stdlibUpgrade libruby2_5-2_5Upgrade ruby2.5-doc-ri | Apr 25, 2021 | Apr 20, 2021 |
| Ubuntu | — | Upgrade ruby2.3Upgrade libruby2.3Upgrade ruby2.5Upgrade libruby2.7Upgrade libruby2.5Upgrade ruby2.7 | Apr 21, 2021 | Apr 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub