/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CVE-2025-58767

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2025-58767

Severity

Unknown

Summary

REXML has a DoS condition when parsing malformed XML file

Description

REXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 to 3.4.1 has a DoS vulnerability when parsing XML containing multiple XML declarations. If you need to parse untrusted XMLs, you may be impacted to these vulnerabilities. The REXML gem 3.4.2 or later include the patches to fix these vulnerabilities.

References

Affected packages


The trusted source for open source

Talk to an expert
© 2025 Chainguard. All Rights Reserved.
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing