New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update REXML to 3.3.6 or later to fix DOS vulnerability #957

Open

ls-philippe-casgrain opened this issue Aug 22, 2024 · 1 comment · May be fixed by #958

ls-philippe-casgrain commented Aug 22, 2024

I know it was just updated to 3.3.2, but there's a new vulnerability that is fixed in 3.3.6 or later: https://www.ruby-lang.org/en/news/2024/08/22/dos-rexml-cve-2024-43398/

Since Fastlane depends on this gem, a new release would be appreciated.

setoelkahfi commented Aug 23, 2024

I just found out this warning today. We could increase the version span here.

setoelkahfi linked a pull request

that will close this issue

fix: REXML denial of service vulnerability #958

Open

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment