Lucene search
GoogleOSV:CVE-2021-28965HistoryApr 21, 2021 - 7:15 a.m.
CVE-2021-28965
2021-04-2107:15:07
Google
osv.dev
8
rexml gem
ruby
xml round-trip issues
EPSS
0.001
Percentile
43.0%
The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing.
Related
nessus
nessus
FreeBSD : ruby -- XML round-trip vulnerability in REXML (dec7e4b6-961a-11eb-9c34-080027f515ea)
2021-04-14 00:00:00
EulerOS 2.0 SP8 : ruby (EulerOS-SA-2021-1987)
2021-06-28 00:00:00
EulerOS 2.0 SP9 : ruby (EulerOS-SA-2021-2281)
2021-08-09 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4922-1)
2021-04-21 00:00:00
Fedora: Security Advisory for rubygem-railties (FEDORA-2021-7b8b65bc7a)
2021-04-25 00:00:00
Fedora: Security Advisory for ruby (FEDORA-2021-6385a09efc)
2021-04-23 00:00:00
nvd
nvd
CVE-2021-28965
2021-04-21 07:15:07
redhatcve
redhatcve
CVE-2021-28965
2021-04-08 17:16:00
cbl_mariner
cbl_mariner
CVE-2021-28965 affecting package ruby 2.6.6-4
2021-06-09 03:50:37
CVE-2021-28965 affecting package ruby for versions less than 2.7.4-1
2022-04-09 06:51:53
ubuntu
ubuntu
Ruby vulnerability
2021-04-26 00:00:00
Ruby vulnerability
2021-04-20 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: ruby-2.7.3-136.fc33
2021-04-17 14:06:37
[SECURITY] Fedora 34 Update: rubygem-railties-6.1.2.1-2.fc34
2021-04-24 20:20:14
[SECURITY] Fedora 34 Update: rubygem-pry-0.13.1-5.fc34
2021-04-24 20:20:14
cloudfoundry
cloudfoundry
USN-4922-1: Ruby vulnerability | Cloud Foundry
2021-04-29 00:00:00
freebsd
freebsd
Gitlab -- Vulnerabilities
2021-04-14 00:00:00
ruby -- XML round-trip vulnerability in REXML
2021-04-05 00:00:00
debiancve
debiancve
CVE-2021-28965
2021-04-21 07:15:07
hackerone
hackerone
Ruby: Round-trip instability in REXML
2021-02-16 08:10:08
osv
osv
BIT-ruby-2021-28965
2024-03-06 11:05:40
ruby2.3, ruby2.5, ruby2.7 vulnerability
2021-04-20 17:01:53
REXML round-trip instability
2021-04-30 17:30:37
veracode
veracode
XML Injection
2021-04-17 02:47:08
ubuntucve
ubuntucve
CVE-2021-28965
2021-04-12 00:00:00
prion
prion
Code injection
2021-04-21 07:15:00
rubygems
rubygems
XML round-trip vulnerability in REXML
2021-04-04 21:00:00
alpinelinux
alpinelinux
CVE-2021-28965
2021-04-21 07:15:07
suse
suse
Security update for ruby2.5 (moderate)
2021-04-24 00:00:00
cve
cve
CVE-2021-28965
2021-04-21 07:15:07
cvelist
cvelist
CVE-2021-28965
2021-04-21 06:55:24
github
github
REXML round-trip instability
2021-04-30 17:30:37
amazon
amazon
Medium: ruby24
2021-05-14 16:58:00
Medium: ruby
2024-09-12 18:30:00
rocky
rocky
ruby:2.7 security, bug fix, and enhancement update
2021-06-29 13:57:50
ruby:2.5 security, bug fix, and enhancement update
2021-06-29 13:58:20
ruby:2.6 security, bug fix, and enhancement update
2021-06-29 13:58:40
redhat
redhat
archlinux
archlinux
[ASA-202104-1] gitlab: multiple issues
2021-04-29 00:00:00
almalinux
almalinux
Moderate: ruby:2.7 security, bug fix, and enhancement update
2021-06-29 13:57:50
Moderate: ruby:2.5 security, bug fix, and enhancement update
2021-06-29 13:58:20
Moderate: ruby:2.6 security, bug fix, and enhancement update
2021-06-29 13:58:40
oraclelinux
oraclelinux
ruby:2.7 security, bug fix, and enhancement update
2021-07-07 00:00:00
ruby:2.5 security, bug fix, and enhancement update
2021-07-02 00:00:00
ruby:2.6 security, bug fix, and enhancement update
2021-07-07 00:00:00
debian
debian
[SECURITY] [DSA 5066-1] ruby2.5 security update
2022-02-03 19:26:40
mageia
mageia
Updated ruby packages fix security vulnerability
2021-12-24 00:01:45
ibm
ibm
rosalinux
rosalinux
Advisory ROSA-SA-2021-1966
2021-07-02 18:06:34