Bug #20667
Updated by kou (Kouhei Sutou) 10 months ago
It would be nice to have the recent REXML ReXML CVE fixes backported everywhere. BTW it is surprising that REXML ReXML was recently bumped in 3.1 / 3.2 branches, but 3.3 branch brach stays with older REXML ReXML 3.2.