Updated rexml dependency version to resolve the DoS vulnerability.

[bad-vegan]

Context

The current version the rexml dependency has a number of DoS vulnerabilities that can be remediated by upgrading to the latest version (3.3.6) of the gem.

CVE-2024-39908

Name: rexml
Version: 3.3.1
CVE: CVE-2024-39908
GHSA: GHSA-4xqq-m2hx-25v8
Criticality: Medium
URL: https://github.com/ruby/rexml/security/advisories/GHSA-4xqq-m2hx-25v8
Title: DoS in REXML
Solution: update to '>= 3.3.2'

CVE-2024-41123

Name: rexml
Version: 3.3.1
CVE: CVE-2024-41123
GHSA: GHSA-r55c-59qm-vjw6
Criticality: Medium
URL: https://www.ruby-lang.org/en/news/2024/08/01/dos-rexml-cve-2024-41123
Title: DoS vulnerabilities in REXML
Solution: update to '>= 3.3.3'

CVE-2024-41946

Name: rexml Version: 3.3.1
CVE: CVE-2024-41946
GHSA: GHSA-5866-49gr-22v4
Criticality: Medium
URL: https://www.ruby-lang.org/en/news/2024/08/01/dos-rexml-cve-2024-41946
Title: DoS vulnerabilities in REXML
Solution: update to '>= 3.3.3'

CVE-2024-43398

Name: rexml
Version: 3.3.1
CVE: CVE-2024-43398
GHSA: GHSA-vmwr-mc7x-5vc3
Criticality: Medium
URL: https://github.com/ruby/rexml/security/advisories/GHSA-vmwr-mc7x-5vc3
Title: REXML denial of service vulnerability
Solution: update to '>= 3.3.6'

What changed

• Update the rexml runtime dependency to use the latest version 3.3.6.
• Noted the update in the change log.

[yolk]

Thank you!