Read the docs

ruby

Records136All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical18CVSS 9.0–10.0
CVSS high49CVSS 7.0–8.9

Exploited now

ruby records in CISA KEV
TI-2026-71508 GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability Priority CRITICAL 100KEV 2026-10-29

Components

Products in the NVD configurations · select one to filter the records
Ruby 93 records CRITICAL Rexml 8 records MEDIUM Net 6 records LOW Cgi 5 records MEDIUM Webrick 5 records MEDIUM Uri 4 records LOW Openssl 2 records MEDIUM Rdoc 2 records LOW

Records

8 records in Rexml · all components

TI-2024-27968 CVE-2024-41946 · GHSA-5866-49gr-22v4

REXML DoS vulnerability

Priority MEDIUM 41

REXML is an XML toolkit for Ruby.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01192 Published 2024-08-01 Partial fix · 3.3.3 CWE-400
TI-2024-27475 CVE-2024-41123 · GHSA-r55c-59qm-vjw6

REXML DoS vulnerability

Priority MEDIUM 41

REXML is an XML toolkit for Ruby.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01283 Published 2024-08-01 Partial fix · 3.3.3 CWE-400
TI-2024-33228 CVE-2024-49761 · GHSA-2rxp-v6pw-ch6m

REXML ReDoS vulnerability

Priority LOW 38

REXML is an XML toolkit for Ruby.

CVSS 4.0MEDIUM 6.6 Network No auth No interaction EPSS 0.0142 Published 2024-10-28 Partial fix · 3.3.9 CWE-1333
TI-2024-29047 CVE-2024-43398 · GHSA-vmwr-mc7x-5vc3

REXML denial of service vulnerability

Priority LOW 29

REXML is an XML toolkit for Ruby.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01205 Published 2024-08-22 Partial fix · 3.3.6 CWE-776
TI-2024-26802 CVE-2024-39908 · GHSA-4xqq-m2hx-25v8

Denial of service in REXML

Priority LOW 23

REXML is an XML toolkit for Ruby.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01493 Published 2024-07-16 Partial fix · 3.3.2 CWE-400
Open these records in search →