Non évaluée
REXML has a DoS condition when parsing malformed XML file
CVE-2025-58767
Première détection SecPulse
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2025-58767 ruby-rexml Corrigé dans: 3.4.4-r0
- Debian DEBIAN-CVE-2025-58767 ruby2.7
- Ubuntu UBUNTU-CVE-2025-58767 ruby2.3
Description d'origine La description telle que publiée par la source (souvent en anglais).
REXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 to 3.4.1 has a DoS vulnerability when parsing XML containing multiple XML declarations. If you need to parse untrusted XMLs, you may be impacted to these vulnerabilities. The REXML gem 3.4.2 or later include the patches to fix these vulnerabilities.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com