AZL-42052
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-42052.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-42052
- Upstream
- Published
- 2024-05-16T16:15:09Z
- Modified
- 2026-04-01T05:14:27.427124Z
- Summary
- CVE-2024-35176 affecting package ruby for versions less than 3.3.3-1
- Details
-
REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many
<s in an attribute value. Those who need to parse untrusted XMLs may be impacted to this vulnerability. The REXML gem 3.2.7 or later include the patch to fix this vulnerability. As a workaround, don't parse untrusted XMLs. - References