REXML has a DoS condition when parsing malformed XML file

REXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 to 3.4.1 has a DoS vulnerability when parsing XML containing multiple XML declarations. If you need to parse untrusted XMLs, you may be impacted to these vulnerabilities. The REXML gem 3.4.2 or later include the patches to fix these vulnerabilities.

N/A

未加控制的资源消耗(资源穷尽)

REXML 资源管理错误漏洞

REXML是Ruby开源的一个用于 Ruby 的 XML 工具包。 REXML 3.3.3版本至3.4.1版本存在资源管理错误漏洞，该漏洞源于解析包含多个XML声明的XML时处理不当，可能导致拒绝服务攻击。

N/A

N/A