DirectorySecurity Advisories
Sign In
Security Advisories

CVE-2024-41123

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2024-41123

CGA ID

CGA-pmwg-fxg2-3pq2

Severity

7.5

High

CVSS V3

Description

REXML is an XML toolkit for Ruby. The REXML gem before 3.3.2 has some DoS vulnerabilities when it parses an XML that has many specific characters such as whitespace character, >] and ]>. The REXML gem 3.3.3 or later include the patches to fix these vulnerabilities.

References

Affected packages


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images