Read the docs
Red Hat Security Advisory

RHSA-2024:6785

ruby:3.3 security update

Released 2024-09-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 4 records

TI-2024-27968 CVE-2024-41946 · GHSA-5866-49gr-22v4

REXML DoS vulnerability

Priority MEDIUM 41

REXML is an XML toolkit for Ruby.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01192 Published 2024-08-01 Partial fix · 3.3.3 CWE-400
TI-2024-27475 CVE-2024-41123 · GHSA-r55c-59qm-vjw6

REXML DoS vulnerability

Priority MEDIUM 41

REXML is an XML toolkit for Ruby.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01283 Published 2024-08-01 Partial fix · 3.3.3 CWE-400
TI-2024-29047 CVE-2024-43398 · GHSA-vmwr-mc7x-5vc3

REXML denial of service vulnerability

Priority LOW 29

REXML is an XML toolkit for Ruby.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01205 Published 2024-08-22 Partial fix · 3.3.6 CWE-776
TI-2024-26802 CVE-2024-39908 · GHSA-4xqq-m2hx-25v8

Denial of service in REXML

Priority LOW 23

REXML is an XML toolkit for Ruby.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01493 Published 2024-07-16 Partial fix · 3.3.2 CWE-400