Rexml vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

RE

Product

Rexml

by Ruby-lang · last CVE Sep 17, 2025

8

CVEs

0

On KEV

7.5

Max CVSS

0

New 30D

Vulnerabilities8 In the news0 Timeline

Severity mix

Critical 0High 4Medium 4Low 0

Severity

All severities8 Critical0 High4 Medium4 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Rexml to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-49761	7.5	1%	Oct 28	REXML is an XML toolkit for Ruby Affected: before 3.3.9
CVE-2024-41946	7.5	1%	Aug 1	REXML is an XML toolkit for Ruby Affected: before 3.3.3
CVE-2024-41123	7.5	1%	Aug 1	REXML is an XML toolkit for Ruby Affected: before 3.2.7; 3.2.8 before 3.3.2
CVE-2021-28965	7.5	5%	Apr 21	The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues Affected: before 3.2.5
CVE-2024-43398	5.9	1%	Aug 22	REXML is an XML toolkit for Ruby Affected: before 3.3.6
CVE-2025-58767	5.3	0%	Sep 17	REXML is an XML toolkit for Ruby Affected: 3.3.3 before 3.4.2
CVE-2024-35176	5.3	2%	May 16	REXML is an XML toolkit for Ruby Affected: before 3.2.7
CVE-2024-39908	4.3	1%	Jul 16	REXML is an XML toolkit for Ruby Affected: before 3.3.2