The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
REXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 to 3.4.1 has a DoS vulnerability when parsing XML containing multiple XML declarations. If you need to parse untrusted XMLs, you may be impacted to these vulnerabilities. The REXML gem 3.4.2 or later include the patches to fix these vulnerabilities.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ruby-libsUpgrade rubygem-test-unitUpgrade rubygem-rakeUpgrade rubygem-abrt-docUpgrade rubygem-rexmlUpgrade rubygems-develUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade ruby-docUpgrade rubygem-raccUpgrade rubygem-psychUpgrade rubygem-typeprofUpgrade rubygem-rbsUpgrade ruby-default-gemsUpgrade rubygem-rdocUpgrade rubygem-rssUpgrade ruby-bundled-gemsUpgrade rubyUpgrade rubygemsUpgrade rubygem-abrtUpgrade rubygem-mysql2-docUpgrade rubygem-pgUpgrade ruby-develUpgrade rubygem-minitestUpgrade rubygem-power_assertUpgrade rubygem-mysql2Upgrade rubygem-irbUpgrade rubygem-bundlerUpgrade rubygem-pg-docUpgrade rubygem-json | Jan 8, 2026 | Dec 10, 2025 |
| Alpine Linux | — | Upgrade ruby-rexml | Jan 7, 2026 | Sep 17, 2025 |
| Amazon_linux_2023 | — | Upgrade ruby3.2-rubygem-rbs-debuginfoUpgrade ruby3.2-rubygem-bundlerUpgrade ruby3.2-rubygem-io-consoleUpgrade ruby3.2-rubygem-rssUpgrade ruby3.2-rubygem-power_assertUpgrade ruby3.2-bundled-gemsUpgrade ruby3.2-rubygem-psychUpgrade ruby3.2-bundled-gems-debuginfoUpgrade ruby3.2-rubygem-minitestUpgrade ruby3.2-rubygemsUpgrade ruby3.2-rubygem-bigdecimal-debuginfoUpgrade ruby3.2-libsUpgrade ruby3.2-rubygem-rakeUpgrade ruby3.2-rubygem-io-console-debuginfoUpgrade ruby3.2-rubygem-rbsUpgrade ruby3.2-rubygem-irbUpgrade ruby3.2-rubygem-test-unitUpgrade ruby3.2-default-gemsUpgrade ruby3.2-debugsourceUpgrade ruby3.2-develUpgrade ruby3.2-rubygem-rexmlUpgrade ruby3.2-libs-debuginfoUpgrade ruby3.2-docUpgrade ruby3.2-rubygems-develUpgrade ruby3.2-debuginfoUpgrade ruby3.2Upgrade ruby3.2-rubygem-json-debuginfoUpgrade ruby3.2-rubygem-jsonUpgrade ruby3.2-rubygem-rdocUpgrade ruby3.2-rubygem-bigdecimalUpgrade ruby3.2-rubygem-psych-debuginfoUpgrade ruby3.2-rubygem-typeprof | Sep 30, 2025 | Sep 17, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ruby-helpUpgrade rubygem-bigdecimalUpgrade rubygem-io-consoleUpgrade rubygem-rdocUpgrade rubygem-did_you_meanUpgrade rubygem-psychUpgrade ruby-irbUpgrade rubygem-jsonUpgrade rubyUpgrade rubygemsUpgrade rubygem-openssl | Mar 17, 2026 | Mar 16, 2026 |
| Oracle_linux | — | Upgrade rubygem-bigdecimalUpgrade rubygem-rexmlUpgrade rubygem-rssUpgrade ruby-docUpgrade rubygem-typeprofUpgrade rubygem-io-consoleUpgrade rubygem-mysql2Upgrade rubygem-pg-docUpgrade rubygem-jsonUpgrade rubyUpgrade rubygem-abrtUpgrade rubygemsUpgrade ruby-libsUpgrade ruby-bundled-gemsUpgrade rubygem-abrt-docUpgrade rubygem-psychUpgrade rubygem-rbsUpgrade rubygem-rakeUpgrade ruby-default-gemsUpgrade rubygem-irbUpgrade rubygem-test-unitUpgrade rubygem-raccUpgrade rubygem-mysql2-docUpgrade rubygem-power_assertUpgrade rubygem-pgUpgrade rubygems-develUpgrade rubygem-bundlerUpgrade rubygem-rdocUpgrade rubygem-minitestUpgrade ruby-devel | Dec 15, 2025 | Sep 17, 2025 |
| Redhat_linux | — | Upgrade ruby-develUpgrade ruby-libsUpgrade rubygem-mysql2Upgrade rubygem-rssUpgrade rubygem-psychUpgrade ruby-bundled-gemsUpgrade rubygem-minitestUpgrade rubyUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-irbUpgrade rubygem-pgUpgrade rubygem-rbsUpgrade ruby-default-gemsUpgrade rubygemsUpgrade ruby-libs-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-abrtUpgrade rubygem-jsonUpgrade rubygem-bundlerUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bigdecimal-debuginfoNo solution existsUpgrade ruby-docUpgrade rubygem-pg-docUpgrade rubygem-power_assertUpgrade rubygem-json-debuginfoUpgrade rubygem-bigdecimalUpgrade ruby-debugsourceUpgrade rubygem-rakeUpgrade rubygem-typeprofUpgrade rubygem-rdocUpgrade rubygem-racc-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-abrt-docUpgrade rubygem-rexmlUpgrade ruby-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-io-console-debuginfoUpgrade rubygem-rbs-debuginfoUpgrade rubygem-test-unitUpgrade rubygem-raccUpgrade rubygem-pg-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-mysql2-docUpgrade rubygems-devel | Dec 15, 2025 | Sep 17, 2025 |
| Rocky_linux | — | Upgrade rubygem-psychUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-io-consoleUpgrade rubygem-jsonUpgrade rubygem-pg-debuginfoUpgrade rubygem-rbs-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-bigdecimalUpgrade ruby-libsUpgrade ruby-bundled-gemsUpgrade ruby-debugsourceUpgrade rubygem-rbsUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-psych-debuginfoUpgrade rubygem-raccUpgrade rubygem-mysql2Upgrade ruby-bundled-gems-debuginfoUpgrade rubyUpgrade ruby-libs-debuginfoUpgrade rubygem-pgUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-racc-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade ruby-devel | Feb 5, 2026 | Jan 3, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Sep 17, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub