The REXML gem versions prior to 3.3.3 contain denial-of-service (DoS) vulnerabilities triggered by parsing XML documents with many specific characters such as whitespace, ">]", and "]>". These vulnerabilities can impact applications that parse untrusted XML inputs. The issue is fixed in version 3.3.3 and later.