VulertSecurity VulertSecurity

Vulnerability Database · Alpine · ruby-rexml · Version

ruby-rexml 3.2.6-r0

3.2.6-r0 is affected by 10 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 0 High 6 Medium 0 Low 0 Unrated 4

All ruby-rexml versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

ruby-rexml 3.2.6-r0 vulnerabilities

10 vulnerabilities cover ruby-rexml 3.2.6-r0. Open the full list in the database.

Vulnerability Severity Fixed version Disclosed
REXML ReDoS Vulnerability in Ruby Packages: CVE-2024-49761 7.5 high 3.3.9-r0 28 Oct 2024
Critical ReDoS Vulnerability in ruby-rexml Package Affects Multiple Alpine Versions 7.5 high 3.3.9-r0 28 Oct 2024
Denial of Service Vulnerability in REXML Gem 3.3.2 for Ruby Packages 7.5 high 3.3.9-r0 01 Aug 2024
DoS Vulnerability in REXML Package: ruby-rexml Affected by Entity Expansion Attack 7.5 high 3.3.9-r0 01 Aug 2024
CVE-2024-41123: REXML XML Toolkit DoS Vulnerability in Ruby Packages 7.5 high 3.3.9-r0 01 Aug 2024
Critical DoS Vulnerability in ruby-rexml Package: CVE-2024-41123 7.5 high 3.3.9-r0 01 Aug 2024
REXML DoS Vulnerability in Ruby Packages: CVE-2024-43398 N/A unrated 3.3.9-r0 22 Aug 2024
DoS Vulnerability in REXML Package: ruby-rexml Affected by Deep Element Parsing Issue N/A unrated 3.3.9-r0 22 Aug 2024
CVE-2024-39908: REXML DoS Vulnerabilities in Ruby XML Toolkit N/A unrated 3.3.9-r0 16 Jul 2024
Critical DoS Vulnerability in ruby-rexml Package: Upgrade Recommended N/A unrated 3.3.9-r0 16 Jul 2024

Looking for another version, or everything Vulert holds for ruby-rexml?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About ruby-rexml 3.2.6-r0

Is ruby-rexml 3.2.6-r0 vulnerable?

Yes. 10 vulnerabilities in the Vulert database cover ruby-rexml 3.2.6-r0: 0 critical, 6 high, 0 medium and 0 low, plus 4 not yet rated. Each entry above names the fixed version to move to.

How do I monitor ruby-rexml for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the ruby-rexml version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.