Showing 2 of 2 total issues
Regular Expression Denial of Service in Addressable templates Open
Open
addressable (2.7.0)- Read upRead up
- Exclude checks
Advisory: CVE-2021-32740
Criticality: High
URL: https://github.com/advisories/GHSA-jxhc-q857-3j6g
Solution: upgrade to >= 2.8.0
XML round-trip vulnerability in REXML Open
Open
rexml (3.2.4)- Read upRead up
- Exclude checks
Advisory: CVE-2021-28965
Criticality: High
URL: https://www.ruby-lang.org/en/news/2021/04/05/xml-round-trip-vulnerability-in-rexml-cve-2021-28965/
Solution: upgrade to ~> 3.1.9.1, ~> 3.2.3.1, >= 3.2.5