NetBSD 10.0 — ruby-rexml — multiple vulnerabilities (2 CVEs) — patch and remediation guide
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2021-28965 CVE-2025-58767 Upstream summary: pkgsrc audit-packages flagged ruby{25,26,27,30}-rexml<3.2.5 for vulnerability class 'input-validation'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-28965 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]