| Package | Affected versions | Patched versions |
|---|---|---|
| ruby | = 1.8.6= 1.8.7= 1.9 |
The REXML module in Ruby 1.8.6 through 1.8.6-p287, 1.8.7 through 1.8.7-p72, and 1.9 allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML document with recursively nested entities, aka an "XML entity explosion."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free