5 matches found
Debian DLA-2316-1 : ruby-kramdown security update
ruby-kramdown processes the template option inside Kramdown documents by default, which allows unintended read access such as template='/etc/passwd' or unintended embedded Ruby code execution such as a string that begins with template='string://%= . NOTE: kramdown is used in Jekyll, GitLab Pages,...
9.8CVSS8AI score0.0456EPSS
SaveExploits0References4
20