https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 09:09:34 +0000 https://vulnerability.circl.lu/vuln/ghsa-c2f4-jgmc-q2r5 <p><strong>Affected:</strong> RubyGems: rexml</p> <p>### Impact</p> <p>The REXML gems from 3.3.3 to 3.4.1 have a DoS vulnerability when parsing XML containing multiple XML declarations. If you need to parse untrusted XMLs, you may be impacted to these vulnerabilities.</p> <p>### Patches</p> <p>REXML gems 3.4.2 or later include the patches to fix these vulnerabilities.</p> <p>### Workarounds</p> <p>Don&#39;t parse untrusted XMLs.</p> <p>### References</p> <p>* https://www.ruby-lang.org/en/news/2025/09/18/dos-rexml-cve-2025-58767/ : An announcement on www.ruby-lang.org</p> <p><strong>Affected:</strong> RubyGems: rexml</p> <p>### Impact</p> <p>The REXML gems from 3.3.3 to 3.4.1 have a DoS vulnerability when parsing XML containing multiple XML declarations. If you need to parse untrusted XMLs, you may be impacted to these vulnerabilities.</p> <p>### Patches</p> <p>REXML gems 3.4.2 or later include the patches to fix these vulnerabilities.</p> <p>### Workarounds</p> <p>Don&#39;t parse untrusted XMLs.</p> <p>### References</p> <p>* https://www.ruby-lang.org/en/news/2025/09/18/dos-rexml-cve-2025-58767/ : An announcement on www.ruby-lang.org</p> https://vulnerability.circl.lu/vuln/ghsa-c2f4-jgmc-q2r5