Known vulnerabilities in rubygem-rexml

Vendor: OpenAnolis
Software: rubygem-rexml
Software CPE: cpe:2.3:o:openanolis:rubygem-rexml:*:*:*:*:*:anolis_os:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 24
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting rubygem-rexml rubygem-rexml is affected by 24 known vulnerabilities: 4 high, 18 medium, 2 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145888 - Resource exhaustion
CVE-2026-80212		 CWE-400 Medium
No
No
 3.3.9-11 27.08.2026 SB2026082726
SB2026090515
SB2026090516
and 12 more
#VU126644 - Improper Access Control
CVE-2026-41316		 CWE-284 High
No
No
 3.3.9-7, 3.4.4-6 21.04.2026 SB2026042131
SB20260509132
SB2026051815
and 11 more
#VU116663 - Exposure of sensitive information to an unauthorized actor
CVE-2025-61594		 CWE-200 Medium
No
No
 3.4.4-5 07.10.2025 SB2025100723
SB2025110338
SB2025111485
and 4 more
#VU115794 - Resource exhaustion
CVE-2025-58767		 CWE-400 Low
No
No
 3.3.9-6, 3.4.4-5 18.09.2025 SB2025091868
SB2025102434
SB2025110338
and 12 more
#VU114812 - Resource exhaustion
CVE-2025-24294		 CWE-400 Medium
No
No
 3.4.4-5 04.09.2025 SB2025090467
SB2025090470
SB2025090473
and 12 more
#VU112026 - Asymmetric Resource Consumption (Amplification)
CVE-2025-25186		 CWE-405 Medium
No
No
 3.3.9-4 27.06.2025 SB2025062740
SB2025062741
SB2025062742
and 7 more
#VU108125 - Resource exhaustion
CVE-2025-43857		 CWE-400 Low
No
No
 3.3.9-5 02.05.2025 SB2025050219
SB2025061336
SB2025081224
and 1 more
#VU105106 - Improper input validation
CVE-2025-27219		 CWE-20 Medium
No
No
 3.3.9-4 27.02.2025 SB20250227242
SB2025030761
SB2025031451
and 15 more
#VU105105 - Exposure of sensitive information to an unauthorized actor
CVE-2025-27221		 CWE-200 Medium
No
No
 3.3.9-4, 3.4.4-5 27.02.2025 SB20250227241
SB2025030761
SB2025031451
and 16 more
#VU96970 - Resource exhaustion
CVE-2024-43398		 CWE-400 Medium
No
No
 3.3.6-3 10.09.2024 SB2024091006
SB2024091007
SB2024091008
and 28 more
#VU95149 - Improper input validation
CVE-2024-41123		 CWE-20 Medium
No
No
 3.3.6-3 01.08.2024 SB2024080145
SB2024091009
SB2024091607
and 24 more
#VU95148 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2024-41946		 CWE-776 Medium
No
No
 3.3.6-3 01.08.2024 SB2024080145
SB2024082374
SB2024091607
and 22 more
#VU94363 - Improper input validation
CVE-2024-39908		 CWE-20 Medium
No
No
 3.3.6-3 16.07.2024 SB2024071616
SB2024083015
SB2024091009
and 22 more
#VU88970 - Out-of-bounds read
CVE-2024-27282		 CWE-125 Medium
No
No
 3.2.5-143.0.1, 3.3.6-3 24.04.2024 SB2024042420
SB2024042421
SB2024042450
and 21 more
#VU87693 - Out-of-bounds read
CVE-2024-27280		 CWE-125 Medium
No
No
 3.2.5-143.0.1, 3.3.6-3 21.03.2024 SB2024032138
SB2024041295
SB2024042421
and 22 more
#VU87692 - Improper input validation
CVE-2024-27281		 CWE-20 High
No
No
 3.2.5-143.0.1, 3.3.6-3 21.03.2024 SB2024032137
SB2024041295
SB2024042421
and 18 more
#VU77803 - Incorrect Regular Expression
CVE-2023-36617		 CWE-185 Medium
No
No
 3.2.5-9 29.06.2023 SB2023062931
SB2023071289
SB2023101967
and 13 more
#VU74007 - Incorrect Regular Expression
CVE-2023-28756		 CWE-185 Medium
No
No
 3.2.5-143.0.1 24.03.2023 SB2023033146
SB2023050430
SB2023051746
and 33 more
#VU74004 - Incorrect Regular Expression
CVE-2023-28755		 CWE-185 Medium
No
No
 3.2.5-9, 3.2.5-143.0.1 24.03.2023 SB2023033146
SB2023042108
SB2023050430
and 41 more
#VU69506 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2021-33621		 CWE-113 Medium
No
No
 3.2.5-143.0.1 22.11.2022 SB2022112239
SB2022112439
SB2023011730
and 31 more


Showing elements 1 - 20 out of 24