REXML 3.3.6

{
  "id": "ec1994a4e9169563bc3051052287368b2fe79bfb965a0646cbd22c6132c4868c",
  "url": "https://github.com/ruby/rexml/releases/tag/v3.3.6",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "REXML 3.3.6",
    "summary": "REXML 3.3.6 fixes a security-check bug involving default entity expansions, which should not be counted because they do not pose a security risk.",
    "evidence": "Fixes Fixed a bug that default entity expansions are counted for security check. Default entity expansions should not be counted because they don't have a security risk.",
    "products": [
      {
        "name": {
          "value": "REXML",
          "evidence": "REXML 3.3.6 - 2024-08-22"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.3.6",
            "evidence": "REXML 3.3.6 - 2024-08-22"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "github-ruby-rexml",
  "document_id": 22518,
  "published_at": "2024-08-22T01:05:57+00:00"
}