CocoaPods / CocoaPods/Xcodeproj
CVE-2024-49761 for rexml < 3.3.9
Open
- Dominant language
- Ruby
- Stars
- 2.4k
- Forks
- 488
- PR merge metrics
- No merged PRs in 30d
Description
https://www.ruby-lang.org/en/news/2024/10/28/redos-rexml-cve-2024-49761/
Similar issues:
- https://github.com/CocoaPods/Xcodeproj/issues/947
- https://github.com/CocoaPods/Xcodeproj/issues/957
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reviewing the repository's dependency declarations and the Ruby security advisory linked in the issue. Confirm which declaration permits rexml versions below 3.3.9; done means the vulnerable range is no longer allowed and the repository's relevant checks pass.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- ruby
- Domain
- security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100