The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
REXML is an XML toolkit for Ruby. The REXML gem before 3.3.2 has some DoS vulnerabilities when it parses an XML that has many specific characters such as whitespace character, `>]` and `]>`. The REXML gem 3.3.3 or later include the patches to fix these vulnerabilities.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-power_assertUpgrade rubygem-pg-docUpgrade rubygem-bigdecimalUpgrade pcs-snmpUpgrade rubygem-rdocUpgrade rubygem-io-consoleUpgrade rubygem-mysql2-docUpgrade rubygem-rakeUpgrade ruby-develUpgrade rubygems-develUpgrade rubygem-typeprofUpgrade rubygem-minitestUpgrade rubygem-raccUpgrade rubygem-irbUpgrade rubygem-abrt-docUpgrade rubygem-rexmlUpgrade ruby-default-gemsUpgrade rubygem-rbsUpgrade rubygem-test-unitUpgrade pcsUpgrade rubygem-jsonUpgrade rubyUpgrade rubygem-rssUpgrade ruby-libsUpgrade rubygem-abrtUpgrade rubygem-bundlerUpgrade rubygem-pgUpgrade rubygem-psychUpgrade rubygem-mysql2Upgrade rubygemsUpgrade ruby-docUpgrade ruby-bundled-gems | Sep 18, 2024 | Sep 16, 2024 |
| Alpine Linux | — | Upgrade ruby-rexml | Aug 8, 2025 | Aug 1, 2024 |
| Amazon_linux_2023 | — | Upgrade ruby3.2-rubygem-json-debuginfoUpgrade ruby3.2-rubygem-rakeUpgrade ruby3.2Upgrade ruby3.2-rubygem-minitestUpgrade ruby3.2-default-gemsUpgrade ruby3.2-rubygem-rbsUpgrade ruby3.2-rubygemsUpgrade ruby3.2-rubygem-test-unitUpgrade ruby3.2-libsUpgrade ruby3.2-rubygem-rexmlUpgrade ruby3.2-rubygem-rdocUpgrade ruby3.2-libs-debuginfoUpgrade ruby3.2-rubygem-irbUpgrade ruby3.2-bundled-gems-debuginfoUpgrade ruby3.2-rubygem-io-console-debuginfoUpgrade ruby3.2-rubygem-bundlerUpgrade ruby3.2-rubygem-psychUpgrade ruby3.2-docUpgrade ruby3.2-debugsourceUpgrade ruby3.2-develUpgrade ruby3.2-rubygem-power_assertUpgrade ruby3.2-rubygem-bigdecimalUpgrade ruby3.2-rubygem-psych-debuginfoUpgrade ruby3.2-bundled-gemsUpgrade ruby3.2-debuginfoUpgrade ruby3.2-rubygem-typeprofUpgrade ruby3.2-rubygem-rssUpgrade ruby3.2-rubygem-io-consoleUpgrade ruby3.2-rubygem-bigdecimal-debuginfoUpgrade ruby3.2-rubygem-rbs-debuginfoUpgrade ruby3.2-rubygem-jsonUpgrade ruby3.2-rubygems-devel | Apr 2, 2025 | Aug 1, 2024 |
| Debian | — | Upgrade ruby3.3Upgrade ruby2.7 | Jan 20, 2025 | Aug 1, 2024 |
| Gentoo Linux | — | Upgrade dev-ruby/rexml. | Jul 9, 2025 | Aug 1, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ruby-helpUpgrade ruby-irbUpgrade ruby | Nov 11, 2024 | Aug 1, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade rubyUpgrade ruby-helpUpgrade ruby-irb | Dec 12, 2024 | Aug 1, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ruby-irbUpgrade rubyUpgrade ruby-help | Jan 15, 2025 | Aug 1, 2024 |
| Oracle_linux | — | Upgrade pcsUpgrade rubygem-irbUpgrade rubygemsUpgrade rubygem-minitestUpgrade rubygem-mysql2-docUpgrade ruby-develUpgrade rubyUpgrade rubygem-abrtUpgrade rubygem-test-unitUpgrade rubygem-rdocUpgrade rubygem-bundlerUpgrade rubygem-typeprofUpgrade rubygem-pgUpgrade rubygem-rbsUpgrade rubygem-power_assertUpgrade ruby-default-gemsUpgrade ruby-bundled-gemsUpgrade rubygem-pg-docUpgrade pcs-snmpUpgrade rubygems-develUpgrade rubygem-raccUpgrade rubygem-rexmlUpgrade rubygem-abrt-docUpgrade rubygem-jsonUpgrade rubygem-psychUpgrade rubygem-bigdecimalUpgrade rubygem-mysql2Upgrade rubygem-rakeUpgrade rubygem-io-consoleUpgrade rubygem-rssUpgrade ruby-docUpgrade ruby-libs | Oct 16, 2024 | Aug 1, 2024 |
| Redhat_linux | — | Upgrade rubygem-json-debuginfoUpgrade rubygem-racc-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-io-consoleUpgrade rubygem-pg-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-typeprofUpgrade rubygem-rakeUpgrade pcs-snmpUpgrade rubygem-test-unitUpgrade rubygems-develUpgrade rubygem-psychUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-rbs-debuginfoUpgrade rubygem-abrt-docUpgrade ruby-debuginfoUpgrade rubygem-rexmlUpgrade ruby-libsUpgrade rubygem-bundlerUpgrade rubygem-pg-debugsourceUpgrade rubygem-power_assertUpgrade ruby-default-gemsUpgrade rubygem-pg-docUpgrade rubygem-raccUpgrade rubygem-irbUpgrade rubygem-rbsUpgrade rubygem-jsonNo solution existsUpgrade rubygem-abrtUpgrade ruby-libs-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-rssUpgrade ruby-docUpgrade ruby-develUpgrade rubygem-minitestUpgrade rubygemsUpgrade rubyUpgrade ruby-bundled-gemsUpgrade rubygem-mysql2Upgrade ruby-bundled-gems-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade pcsUpgrade rubygem-rdocUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-pgUpgrade rubygem-mysql2-doc | Sep 18, 2024 | Aug 1, 2024 |
| Rocky_linux | — | Upgrade rubygem-json-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-rbs-debuginfoUpgrade ruby-libsUpgrade pcs-snmpUpgrade rubygem-racc-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-pg-debuginfoUpgrade rubygem-raccUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-io-consoleUpgrade ruby-debuginfoUpgrade ruby-bundled-gemsUpgrade rubygem-pg-debugsourceUpgrade ruby-libs-debuginfoUpgrade ruby-develUpgrade rubygem-mysql2Upgrade rubygem-jsonUpgrade rubygem-pgUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade pcsUpgrade rubygem-rbsUpgrade rubyUpgrade rubygem-psychUpgrade rubygem-psych-debuginfo | Sep 17, 2024 | Aug 1, 2024 |
| Suse | — | Upgrade ruby2.5-devel-extraUpgrade libruby2_5-2_5Upgrade ruby2.5Upgrade ruby2.5-docUpgrade ruby2.5-rubygem-rexml-docUpgrade ruby2.5-doc-riUpgrade ruby2.5-stdlibUpgrade ruby2.5-rubygem-rexmlUpgrade ruby2.5-devel | Dec 5, 2025 | Sep 20, 2024 |
| Ubuntu | — | Upgrade libruby3.3Upgrade ruby2.7Upgrade libruby3.0Upgrade ruby3.0Upgrade ruby3.3Upgrade libruby2.7 (Ubuntu Pro)Upgrade libruby2.3 (Ubuntu Pro)Upgrade libruby3.2Upgrade libruby2.5 (Ubuntu Pro)Upgrade ruby2.5 (Ubuntu Pro)Upgrade ruby2.3 (Ubuntu Pro)Upgrade libruby2.7Upgrade ruby3.2 | Nov 6, 2024 | Aug 1, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub