Vulnerability index

Browse CVEs

2 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

Kramdown CRITICAL 9.8

CVE-2021-28834

Kramdown before 2.3.1 does not restrict Rouge formatters to the Rouge::Formatters namespace, and thus arbitrary classes can be instantiated.

Fix: 2.3.1+

Fix from $2,300 2021-03-19

Kramdown CRITICAL 9.8

CVE-2020-14001

The kramdown gem before 2.3.0 for Ruby processes the template option inside Kramdown documents by default, which allows unintended read access (such …

Fix: 2.3.0+

Fix from $2,300 2020-07-17