ALPINE-CVE-2021-28965
ALPINE-CVE-2021-28965
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing.
CVSS 7.5 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
ruby Alpine:v3.10
- Affected ranges
- ECOSYSTEM: ≥ 2.7.0, < 2.5.9-r0
Update to 2.5.9-r0
ruby Alpine:v3.11
- Affected ranges
- ECOSYSTEM: ≥ 2.7.0, < 2.6.7-r0
Update to 2.6.7-r0
ruby Alpine:v3.12
- Affected ranges
- ECOSYSTEM: ≥ 2.7.0, < 2.7.3-r0
Update to 2.7.3-r0
ruby Alpine:v3.13
- Affected ranges
- ECOSYSTEM: ≥ 2.7.0, < 2.7.3-r0
Update to 2.7.3-r0
ruby Alpine:v3.14
- Affected ranges
- ECOSYSTEM: ≥ 2.7.0, < 2.7.3-r0
Update to 2.7.3-r0
ruby Alpine:v3.15
- Affected ranges
- ECOSYSTEM: ≥ 2.7.0, < 2.7.3-r0
Update to 2.7.3-r0
ruby Alpine:v3.16
- Affected ranges
- ECOSYSTEM: ≥ 2.7.0, < 2.7.3-r0
Update to 2.7.3-r0
ruby Alpine:v3.17
- Affected ranges
- ECOSYSTEM: ≥ 2.7.0, < 2.7.3-r0
Update to 2.7.3-r0
ruby Alpine:v3.18
- Affected ranges
- ECOSYSTEM: ≥ 2.7.0, < 2.7.3-r0
Update to 2.7.3-r0
ruby Alpine:v3.19
- Affected ranges
- ECOSYSTEM: ≥ 2.7.0, < 2.7.3-r0
Update to 2.7.3-r0
ruby Alpine:v3.20
- Affected ranges
- ECOSYSTEM: ≥ 2.7.0, < 2.7.3-r0
Update to 2.7.3-r0
ruby Alpine:v3.21
- Affected ranges
- ECOSYSTEM: ≥ 2.7.0, < 2.7.3-r0
Update to 2.7.3-r0
ruby Alpine:v3.22
- Affected ranges
- ECOSYSTEM: ≥ 2.7.0, < 2.7.3-r0
Update to 2.7.3-r0
ruby Alpine:v3.23
- Affected ranges
- ECOSYSTEM: ≥ 2.7.0, < 2.7.3-r0
Update to 2.7.3-r0
ruby Alpine:v3.24
- Affected ranges
- ECOSYSTEM: ≥ 2.7.0, < 2.7.3-r0
Update to 2.7.3-r0