Bug #20667
Updated by kou (Kouhei Sutou) about 1 month ago
It would be nice to have the recent REXML ReXML CVE fixes backported everywhere. BTW it is surprising that REXML ReXML was recently bumped in 3.1 / 3.2 branches, but 3.3 branch brach stays with older REXML ReXML 3.2.