CVE-2021-28965: XML round-trip vulnerability in REXML
ruby-lang.org