https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:39:36 +0000 https://cve.radiocsirt.org/vuln/brew-travis-cve-2013-1856 <p><strong>Affected:</strong> Homebrew: travis</p> <p>The `ActiveSupport::XmlMini_JDOM` backend in `lib/active_support/xml_mini/jdom.rb` in the Active Support component in Ruby on Rails 3.0.x and 3.1.x before 3.1.12 and 3.2.x before 3.2.13, when JRuby is used, does not properly restrict the capabilities of the XML parser, which allows remote attackers to read arbitrary files or cause a denial of service (resource consumption) via vectors involving (1) an external DTD or (2) an external entity declaration in conjunction with an entity reference.</p> <p><strong>Affected:</strong> Homebrew: travis</p> <p>The `ActiveSupport::XmlMini_JDOM` backend in `lib/active_support/xml_mini/jdom.rb` in the Active Support component in Ruby on Rails 3.0.x and 3.1.x before 3.1.12 and 3.2.x before 3.2.13, when JRuby is used, does not properly restrict the capabilities of the XML parser, which allows remote attackers to read arbitrary files or cause a denial of service (resource consumption) via vectors involving (1) an external DTD or (2) an external entity declaration in conjunction with an entity reference.</p> https://cve.radiocsirt.org/vuln/brew-travis-cve-2013-1856 https://cve.radiocsirt.org/vuln/certa-2013-avi-193 certa-2013-avi-193 https://cve.radiocsirt.org/vuln/certa-2013-avi-193 https://cve.radiocsirt.org/vuln/euvd-2026-105684 EUVD-2026-105684 https://cve.radiocsirt.org/vuln/euvd-2026-105684 https://cve.radiocsirt.org/vuln/fkie_cve-2013-1856 <p>The ActiveSupport::XmlMini_JDOM backend in lib/active_support/xml_mini/jdom.rb in the Active Support component in Ruby on Rails 3.0.x and 3.1.x before 3.1.12 and 3.2.x before 3.2.13, when JRuby is used, does not properly restrict the capabilities of the XML parser, which allows remote attackers to read arbitrary files or cause a denial of service (resource consumption) via vectors involving (1) an external DTD or (2) an external entity declaration in conjunction with an entity reference.</p> <p>The ActiveSupport::XmlMini_JDOM backend in lib/active_support/xml_mini/jdom.rb in the Active Support component in Ruby on Rails 3.0.x and 3.1.x before 3.1.12 and 3.2.x before 3.2.13, when JRuby is used, does not properly restrict the capabilities of the XML parser, which allows remote attackers to read arbitrary files or cause a denial of service (resource consumption) via vectors involving (1) an external DTD or (2) an external entity declaration in conjunction with an entity reference.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-1856 https://cve.radiocsirt.org/vuln/ghsa-9c2j-593q-3g82 <p><strong>Affected:</strong> RubyGems: activesupport</p> <p>The `ActiveSupport::XmlMini_JDOM` backend in `lib/active_support/xml_mini/jdom.rb` in the Active Support component in Ruby on Rails 3.0.x and 3.1.x before 3.1.12 and 3.2.x before 3.2.13, when JRuby is used, does not properly restrict the capabilities of the XML parser, which allows remote attackers to read arbitrary files or cause a denial of service (resource consumption) via vectors involving (1) an external DTD or (2) an external entity declaration in conjunction with an entity reference.</p> <p><strong>Affected:</strong> RubyGems: activesupport</p> <p>The `ActiveSupport::XmlMini_JDOM` backend in `lib/active_support/xml_mini/jdom.rb` in the Active Support component in Ruby on Rails 3.0.x and 3.1.x before 3.1.12 and 3.2.x before 3.2.13, when JRuby is used, does not properly restrict the capabilities of the XML parser, which allows remote attackers to read arbitrary files or cause a denial of service (resource consumption) via vectors involving (1) an external DTD or (2) an external entity declaration in conjunction with an entity reference.</p> https://cve.radiocsirt.org/vuln/ghsa-9c2j-593q-3g82 https://cve.radiocsirt.org/vuln/gsd-2013-1856 gsd-2013-1856 https://cve.radiocsirt.org/vuln/gsd-2013-1856