Ruby: CVE-2021-28965: XML round-trip vulnerability in REXML

[NewsBot]

A new Ruby blog post/announcement has been posted!

There is an XML round-trip vulnerability in REXML gem bundled with Ruby. This vulnerability has been assigned the CVE identifier CVE-2021-28965. We strongly recommend upgrading the REXML gem.

Details

When parsing and serializing a crafted XML document, REXML gem (including the one bundled with Ruby) can create a wrong XML document whose structure is different from the original one. The impact of t...

Get the full details here: CVE-2021-28965: XML round-trip vulnerability in REXML

[bot]

Corresponding tweet for this thread:

Devtalk (dev_talk)

Share link for this tweet.