GHSA-CG4J-Q9V8-6V38 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, ruby3.2-rails, kube-logging-operator, cinc-auditor, kube-fluentd-operator, gitlab-rails-ce, ruby3.4-rails...

GHSA-89VF-4333-QX8V vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, ruby3.2-rails, kube-logging-operator, cinc-auditor, kube-fluentd-operator, gitlab-rails-ce, ruby3.4-rails...

GHSA-V55J-83PF-R9CQ vulnerabilities

Vulnerabilities for packages: ruby3.2-rails...

CVE-2026-33202 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails...

GHSA-2J26-FRM8-CMJ9 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, kube-logging-operator, kube-fluentd-operator, cinc-auditor...

CVE-2026-33167 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails...

GHSA-QMPG-8XG6-PH5Q vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, ruby3.3-rails, ruby4.0-rails, ruby3.4-rails...

GHSA-WX95-C6CV-8532 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, ruby3.4-rails, ruby3.2-rails, ruby4.0-rails...

MiracleLinux 9 : ruby:3.1 (AXSA:2024-8490:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8490:01 advisory. ruby: Buffer overread vulnerability in StringIO CVE-2024-27280 ruby: RCE vulnerability with .rdocoptions in RDoc CVE-2024-27281 ruby: Arbitrary memo...

MiracleLinux 8 : ruby:3.3 (AXSA:2024-8830:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8830:01 advisory. rexml: DoS vulnerability in REXML CVE-2024-39908 rexml: rubygem-rexml: DoS when parsing an XML having many specific characters such as whitespace...

MiracleLinux 9 : ruby:3.3 (AXSA:2025-11557:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-11557:01 advisory. resolv: Denial of Service in resolv gem CVE-2025-24294 rexml: REXML denial of service CVE-2025-58767 When using the + operator to combine URIs,...

MiracleLinux 8 : ruby:3.1 (AXSA:2025-9940:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-9940:01 advisory. rexml: DoS vulnerability in REXML CVE-2024-39908 rexml: rubygem-rexml: DoS when parsing an XML having many specific characters such as whitespace...

AlmaLinux 9 : ruby:3.3 (ALSA-2025:23063)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:23063 advisory. resolv: Denial of Service in resolv gem CVE-2025-24294 rexml: REXML denial of service CVE-2025-58767 Tenable has extracted the preceding description bloc...

AlmaLinux 8 : ruby:3.3 (ALSA-2025:23062)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:23062 advisory. resolv: Denial of Service in resolv gem CVE-2025-24294 rexml: REXML denial of service CVE-2025-58767 Tenable has extracted the preceding description bloc...

RockyLinux 8 : ruby:3.3 (RLSA-2025:23062)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:23062 advisory. resolv: Denial of Service in resolv gem CVE-2025-24294 rexml: REXML denial of service CVE-2025-58767 Tenable has extracted the preceding description blo...

RHEL 9 : ruby:3.3 (RHSA-2025:23140)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:23140 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management task...

Moderate: Red Hat Security Advisory: ruby:3.3 security update

An update for the ruby:3.3 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Moderate: Red Hat Security Advisory: ruby:3.3 security update

An update for the ruby:3.3 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

GHSA-W9PC-FMGC-VXVW vulnerabilities

Vulnerabilities for packages: ruby3.4-rack, ruby3.3-rack, gitlab-cng, ruby4.0-rack, ruby3.2-rack...

Low: ruby3.2

Issue Overview: REXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 to 3.4.1 has a DoS vulnerability when parsing XML containing multiple XML declarations. If you need to parse untrusted XMLs, you may be impacted to these vulnerabilities. The REXML gem 3.4.2 or later include the patches t...