| Package | Affected versions | Patched versions |
|---|---|---|
| rexml | < 3.2.5 | 3.2.5 |
| rexml | < 3.2.5 | 3.2.5 |
| ruby | ≥ 2.7.0, < 2.7.3≥ 3.0.0, < 3.0.1< 2.6.7 | 2.7.33.0.12.6.7 |
The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free