How many ruby-lang rexml CVEs are in CISA KEV?

None of ruby-lang rexml's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of ruby-lang rexml are affected?

15 distinct ruby-lang rexml versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in ruby-lang rexml CVEs?

ruby-lang rexml's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-1333 (Inefficient Regular Expression Complexity), CWE-776 (Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')).

What is the average severity of ruby-lang rexml CVEs?

The average CVSS base score across ruby-lang rexml's scored CVEs is 6.2.

ruby-lang rexml Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: ruby-lang rexml vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Overview

ruby-lang rexml has 8 published CVE records since 2021, of which none are in CISA's KEV catalog and none have a known public exploit. The average CVSS base score across scored CVEs is 6.2. Affected platforms include ruby.

Severity and exploitation

How the CVSS severity of ruby-lang rexml's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High2

Medium5

Low1

In CISA’s Known Exploited Vulnerabilities catalog

None of ruby-lang rexml's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No ruby-lang rexml CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every ruby-lang rexml version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 3.2.72 CVEs
< 3.3.32 CVEs
< 3.2.51 CVE
< 3.3.21 CVE
< 3.3.61 CVE
< 3.3.91 CVE
3.2.8 <= v < 3.3.21 CVE
3.3.3 <= v < 3.4.21 CVE

Fixed in

3.2.72 CVEs

Common weakness types

The CWE weakness categories most often found in ruby-lang rexml CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many ruby-lang rexml CVEs were published each year.

2021

2022

2023

2024

2025

Other ruby-lang products

Browse vulnerabilities for other products by ruby-lang.

Ruby115 CVEs net::imap6 CVEs CGI5 CVEs webrick5 CVEs URI4 CVEs openssl2 CVEs rdoc2 CVEs date1 CVE

All ruby-lang vulnerabilities

Frequently asked questions

Common questions about ruby-lang rexml vulnerabilities.

How many CVEs does ruby-lang rexml have?: ruby-lang rexml has 8 published CVE records since 2021.
How many ruby-lang rexml CVEs are in CISA KEV?: None of ruby-lang rexml's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for ruby-lang rexml vulnerabilities?: No ruby-lang rexml CVEs currently have a tracked public exploit in this dataset.
Which versions of ruby-lang rexml are affected?: 15 distinct ruby-lang rexml versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in ruby-lang rexml CVEs?: ruby-lang rexml's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-1333 (Inefficient Regular Expression Complexity), CWE-776 (Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')).
What is the average severity of ruby-lang rexml CVEs?: The average CVSS base score across ruby-lang rexml's scored CVEs is 6.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track ruby-lang rexml vulnerabilities

Get an alert for each new ruby-lang rexml CVE, with AI-written analysis and remediation steps.

Create an account See pricing