CVE-2025-10990

Name of the Vulnerable Software and Affected Versions REXML (affected versions not specified)

Description A flaw exists in REXML related to inefficient regular expression (regex) parsing when processing hex numeric character references (&#x...) in XML documents. This can lead to a Regular Expression Denial of Service (ReDoS), potentially impacting the availability of the affected component. This issue is a result of an incomplete fix for a previously identified issue. The vulnerability involves the parsing of &#x...; entities within XML data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.