What is CVE-2025-58767?

CVE-2025-58767 is a vulnerability in Ruby Rexml, classified under Uncontrolled Resource Consumption. Published 2025-09-17.

Is CVE-2025-58767 known to be exploited?

3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Resource exhaustion in Ruby Rexml

CVE-2025-58767

REXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 to 3.4.1 has a DoS vulnerability when parsing XML containing multiple XML declarations. If you need to parse untrusted XMLs, you may be impacted to these vulnerabilities. The REXM…

Vulnerability class: DoS (Denial of Service)

EPSS: 0.001 (24.5th percentile) — read the EPSS interpretation.

Affected products

Ruby Rexml — versions >= 3.3.3, < 3.4.2

Weakness classification (CWE)

CWE-400 — Uncontrolled Resource Consumption

Public proof-of-concept exploits

References

https://github.com/ruby/rexml/security/advisories/GHSA-c2f4-jgmc-q2r5 (x_refsource_CONFIRM)
https://github.com/ruby/rexml/commit/5859bdeac792687eaf93d8e8f0b7e3c1e2ed5c23 (x_refsource_MISC)

Frequently asked questions

What is CVE-2025-58767?: CVE-2025-58767 is a vulnerability in Ruby Rexml, classified under Uncontrolled Resource Consumption. Published 2025-09-17.
Is CVE-2025-58767 known to be exploited?: 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.