CVE-2025-58767: DoS vulnerability in REXML
19-Sep-2025 1473
There is a DoS vulnerability in REXML gem. This vulnerability has been assigned the CVE identifier CVE-2025-58767. We strongly recommend upgrading the REXML gem.
Details
Parsing invalid XML containing multiple XML declarations may cause increased execution time and memory usage. Please update REXML gem to version 3.4.2 or later.
CVE-2025-58767: DoS vulnerability in REXML #ruby #rubydeveloper #rubyonrails #CVE-2025-58767: #vulnerability #REXML #vulnerability https://www.rubyonrails.ba/link/cve-2025-58767-dos-vulnerability-in-rexml