https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:07:30.574684+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:4499 ALSA-2024:4499 — Moderate: ruby security update 2026-10-03T16:07:30.767230+00:00

Affected: AlmaLinux:8: ruby, AlmaLinux:8: ruby-devel, AlmaLinux:8: ruby-doc, AlmaLinux:8: ruby-irb, AlmaLinux:8: ruby-libs, AlmaLinux:8: rubygem-abrt, AlmaLinux:8: rubygem-abrt-doc, AlmaLinux:8: rubygem-bigdecimal, AlmaLinux:8: rubygem-bson, AlmaLinux:8: rubygem-bson-doc and 22 more

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

* rubygem-uri: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 (CVE-2023-36617) * ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280) * ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281) * ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282) * REXML: DoS parsing an XML with many `<`s in an attribute value (CVE-2024-35176)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-08622 bdu:2024-08622 2026-10-03T16:07:30.767365+00:00 bdu:2024-08622 https://cve.radiocsirt.org/vuln/brew-asciidoctor-cve-2024-35176 BREW-asciidoctor-CVE-2024-35176 — REXML contains a denial of service vulnerability 2026-10-03T16:07:30.767384+00:00

Affected: Homebrew: asciidoctor

### Impact

The REXML gem before 3.2.6 has a DoS vulnerability when it parses an XML that has many `>`s in an attribute value.

If you need to parse untrusted XMLs, you may be impacted to this vulnerability.

### Patches

The REXML gem 3.2.7 or later include the patch to fix this vulnerability.

### Workarounds

Don't parse untrusted XMLs.

### References

* https://www.ruby-lang.org/en/news/2024/05/16/dos-rexml-cve-2024-35176/

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0923 certfr-2024-avi-0923 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T16:07:30.767414+00:00 certfr-2024-avi-0923 https://cve.radiocsirt.org/vuln/euvd-2026-258128 EUVD-2026-258128 2026-10-03T16:07:30.767430+00:00 EUVD-2026-258128 https://cve.radiocsirt.org/vuln/fkie_cve-2024-35176 fkie_cve-2024-35176 2026-10-03T16:07:30.767441+00:00

REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many `<`s in an attribute value. Those who need to parse untrusted XMLs may be impacted to this vulnerability. The REXML gem 3.2.7 or later include the patch to fix this vulnerability. As a workaround, don't parse untrusted XMLs.

 https://cve.radiocsirt.org/vuln/ghsa-vg3r-rm7w-2xgh GHSA-vg3r-rm7w-2xgh — REXML contains a denial of service vulnerability 2026-10-03T16:07:30.767462+00:00

Affected: RubyGems: rexml

### Impact

The REXML gem before 3.2.6 has a DoS vulnerability when it parses an XML that has many `>`s in an attribute value.

If you need to parse untrusted XMLs, you may be impacted to this vulnerability.

### Patches

The REXML gem 3.2.7 or later include the patch to fix this vulnerability.

### Workarounds

Don't parse untrusted XMLs.

### References

* https://www.ruby-lang.org/en/news/2024/05/16/dos-rexml-cve-2024-35176/

 https://cve.radiocsirt.org/vuln/msrc_cve-2024-35176 msrc_CVE-2024-35176 — REXML contains a denial of service vulnerability 2026-10-03T16:07:30.767488+00:00 msrc_CVE-2024-35176 https://cve.radiocsirt.org/vuln/oesa-2024-1824 OESA-2024-1824 — ruby security update 2026-10-03T16:07:30.767504+00:00

Affected: openEuler:22.03-LTS-SP3: ruby, openEuler:20.03-LTS-SP4: ruby, openEuler:24.03-LTS: ruby, openEuler:22.03-LTS-SP4: ruby, openEuler:22.03-LTS-SP1: ruby

Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks (such as Perl).

Security Fix(es):

REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many `&lt;`s in an attribute value. Those who need to parse untrusted XMLs may be impacted to this vulnerability. The REXML gem 3.2.7 or later include the patch to fix this vulnerability. As a workaround, don&apos;t parse untrusted XMLs.(CVE-2024-35176)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:0129-1 openSUSE-SU-2025:0129-1 — Security update for rubygem-rexml 2026-10-03T16:07:30.767534+00:00

Security update for rubygem-rexml

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-35176 UBUNTU-CVE-2024-35176 2026-10-03T16:07:30.767553+00:00

Affected: Ubuntu:Pro:14.04:LTS: jruby, Ubuntu:Pro:16.04:LTS: ruby2.3, Ubuntu:16.04:LTS: jruby, Ubuntu:Pro:18.04:LTS: ruby2.5, Ubuntu:18.04:LTS: jruby, Ubuntu:20.04:LTS: ruby2.7, Ubuntu:20.04:LTS: jruby, Ubuntu:22.04:LTS: ruby3.0, Ubuntu:24.04:LTS: jruby, Ubuntu:24.04:LTS: ruby3.2 and 2 more

REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many `<`s in an attribute value. Those who need to parse untrusted XMLs may be impacted to this vulnerability. The REXML gem 3.2.7 or later include the patch to fix this vulnerability. As a workaround, don't parse untrusted XMLs.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1465 WID-SEC-W-2024-1465 — IBM License Metric Tool: Schwachstelle ermöglicht Denial of Service 2026-10-03T16:07:30.767587+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM License Metric Tool ausnutzen, um einen Denial of Service Angriff durchzuführen.