Known vulnerabilities in REXML 3.3.6
Vendor:
rubygems.org
Software:
REXML
Version:
3.3.6
Software CPE:
cpe:2.3:a:rubygems.org:rexml:*:*:*:*:*:*:*:*
Website:
https://rubygems.org
Total vulnerabilities:
2
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Vulnerabilities by Severity
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU115794 - Resource exhaustion CVE-2025-58767 |
CWE-400 | Low | 3.4.2 | 18.09.2025 |
SB2025091868 SB2025102434 SB2025110338 and 12 more |
||
| #VU99358 - Inefficient Regular Expression Complexity CVE-2024-49761 |
CWE-1333 | Medium | 3.3.9 | 28.10.2024 |
SB2024102837 SB2024110504 SB20241108111 and 38 more |