https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-07T15:05:46.832696+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2021-28965 CVE-2021-28965 2026-10-07T15:05:47.653251+00:00

The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing.

 https://vulnerability.circl.lu/vuln/usn-4922-1 USN-4922-1 — ruby2.3, ruby2.5, ruby2.7 vulnerability 2026-10-07T15:05:47.653332+00:00

Affected: Ubuntu:16.04:LTS: ruby2.3, Ubuntu:18.04:LTS: ruby2.5, Ubuntu:20.04:LTS: ruby2.7

Juho Nurminen discovered that the REXML gem bundled with Ruby incorrectly parsed and serialized XML documents. A remote attacker could possibly use this issue to perform an XML round-trip attack.