TI-2024-27968 CVE-2024-41946 · GHSA-5866-49gr-22v4
REXML DoS vulnerability
Priority MEDIUM 41
REXML is an XML toolkit for Ruby.
RHSA-2025:4488
ruby:3.1 security update
Released 2025-05-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) ruby-3.1.7-146.module+el9.5.0+23003+a4c328ce.aarch64::ruby:3.1, ruby-3.1.7-146.module+el9.5.0+23003+a4c328ce.i686::ruby:3.1, ruby-3.1.7-146.module+el9.5.0+23003+a4c328ce.ppc64le::ruby:3.1 +47
Fixes 7 records
TI-2024-27475 CVE-2024-41123 · GHSA-r55c-59qm-vjw6
REXML DoS vulnerability
Priority MEDIUM 41
REXML is an XML toolkit for Ruby.
TI-2025-20077 CVE-2025-27220 · GHSA-mhwm-jh88-3gjf
Regular expression denial of service in ruby CGI
Priority LOW 34
In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.
TI-2025-20076 CVE-2025-27219 · GHSA-gh9q-2xrm-x6qv
Resource allocation without limits in ruby CGI
Priority LOW 34
In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability.
TI-2024-29047 CVE-2024-43398 · GHSA-vmwr-mc7x-5vc3
REXML denial of service vulnerability
Priority LOW 29
REXML is an XML toolkit for Ruby.
TI-2025-20078 CVE-2025-27221 · GHSA-22h5-pq3x-2gf2
Information disclosure in ruby URI
Priority LOW 25
In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an inadvertent leakage of authentication credentials because userinfo is retained even after changing the host.
TI-2024-26802 CVE-2024-39908 · GHSA-4xqq-m2hx-25v8
Denial of service in REXML
Priority LOW 23
REXML is an XML toolkit for Ruby.