20963 matches found
UBUNTU-CVE-2024-41946
REXML is an XML toolkit for Ruby. The REXML gem 3.3.2 has a DoS vulnerability when it parses an XML that has many entity expansions with SAX2 or pull parser API. The REXML gem 3.3.3 or later include the patch to fix the vulnerability...
Uncontrolled Resource Consumption ('Resource Exhaustion')
Overview rexml is an An XML toolkit for Ruby. Affected versions of this package are vulnerable to Uncontrolled Resource Consumption 'Resource Exhaustion' via the SAX2 or pull parser API. An attacker can cause the application to consume excessive resources leading to a denial of service by...
CVE-2024-41946
REXML is an XML toolkit for Ruby. The REXML gem 3.3.2 has a DoS vulnerability when it parses an XML that has many entity expansions with SAX2 or pull parser API. The REXML gem 3.3.3 or later include the patch to fix the vulnerability...
CVE-2024-41946 REXML DoS vulnerability
REXML is an XML toolkit for Ruby. The REXML gem 3.3.2 has a DoS vulnerability when it parses an XML that has many entity expansions with SAX2 or pull parser API. The REXML gem 3.3.3 or later include the patch to fix the vulnerability...
CVE-2024-41946
CVE-2024-41946 is a Denial of Service (DoS) vulnerability in the Ruby REXML XML toolkit. It affects the REXML gem when parsing XML that contains many entity expansions using SAX2 or the pull parser API. The issue is fixed in REXML gem version 3.3.3 and later; older releases (notably 3.3.2) are vu...
CVE-2024-41946 REXML DoS vulnerability
REXML is an XML toolkit for Ruby. The REXML gem 3.3.2 has a DoS vulnerability when it parses an XML that has many entity expansions with SAX2 or pull parser API. The REXML gem 3.3.3 or later include the patch to fix the vulnerability...
Malicious code in diosaziose (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e55eab0b1fe3321b359ded42ffc43ae4db39f3ff2dab487f6843d966631c5f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7874 Malicious code in basementio (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34d07a3714013c3b80169617fbfdec7536fb083223135f6e31302f07529046e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7878 Malicious code in modernliner (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware baf623671632e06ed7e8e26020d02280a1f33a08072118d85f4308e61cb33cba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7881 Malicious code in trigiated (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b166834a8cf224895f65eb6d9b88fec709bf6d40b7d986277c00ecae0bfb6dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-41946: Uncontrolled Resource Consumption
REXML is an XML toolkit for Ruby. The REXML gem 3.3.2 has a DoS vulnerability when it parses an XML that has many entity expansions with SAX2 or pull parser API. The REXML gem 3.3.3 or later include the patch to fix the vulnerability...
REXML 安全漏洞
REXML is a Ruby open source XML toolkit for Ruby. A security vulnerability exists in REXML versions prior to 3.3.3, which stems from a DoS vulnerability when parsing XML with many entity extensions...
DoS vulnerabilities in REXML
There is a DoS vulnerability in REXML gem. This vulnerability has been assigned the CVE identifier CVE-2024-41946. We strongly recommend upgrading the REXML gem. Details When parsing an XML that has many entity expansions with SAX2 or pull parser API, REXML gem may take long time. Please update...
MAL-2024-7862 Malicious code in @illimity/core-events (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfbbb8816aecc7d7379b8f283d3911cf8ff743ba65146e93f03c4f001e421635 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7864 Malicious code in @illimity/rtl-faqs-state (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b3cec0888ebd3cfb912bb1459486caca7109d7fdb2a980c28641e3eef38d451 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7861 Malicious code in @illimity/core-banking-state (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e4a29525c951e93fc197dc9c57e657855c0bac65e57ddcf12f6fb12c20dc281 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7868 Malicious code in wix-smarts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df57af06b1b5cd455e4d81a7d9979d518578a2b49fd8b99019d721270edefa65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7866 Malicious code in some-dependency-3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9892935af84d9c4a9ba16e155760875b390cbc18f318be83280fcb53a3278904 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
