CVE-2024-35176

ADVISORY - github

Summary

The REXML gem before 3.2.6 has a DoS vulnerability when it parses an XML that has many >s in an attribute value.

If you need to parse untrusted XMLs, you may be impacted to this vulnerability.

The REXML gem 3.2.7 or later include the patch to fix this vulnerability.

Don't parse untrusted XMLs.

EPSS Score⁠: 0.07078 (0.911)

ADVISORY - nist

Uncontrolled Resource Consumption

Allocation of Resources Without Limits or Throttling

ADVISORY - github

Uncontrolled Resource Consumption

ADVISORY - gitlab

OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities

Uncontrolled Resource Consumption

OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

ADVISORY - redhat

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.