KP
Vendor
Kramdown Project
2
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2021-28834 | KR Kramdown Kramdown Project | 9.8 | Mar 19 | Kramdown before 2.3.1 does not restrict Rouge formatters to the Rouge::Formatters namespace, and thus arbitrary classes can be instantiated |
| CVE-2020-14001 | KR Kramdown Kramdown Project | 9.8 | Jul 17 | The kramdown gem before 2.3.0 for Ruby processes the template option inside Kramdown documents by default, which allows unintended read access (such as template="/etc/passwd") or… |