Upgrade REXML to 3.3.2 or later

[subhams087]

The REXML gem before 3.3.1 has some DoS vulnerabilities when it parses an XML that has many specific characters such as <, 0 and %>. If you need to parse untrusted XMLs, you may be impacted to these vulnerabilities. The REXML gem 3.3.2 or later include the patches to fix these vulnerabilities.

[douglashill]

This was already addressed on master in #948, although there hasn’t so far been a release including this change.

Note that are additional vulnerabilities fixed in REXML 3.3.3:

• GHSA-5866-49gr-22v4
• GHSA-r55c-59qm-vjw6

[paulb777]

Duplicate of #947