Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-28834
9.8
CRITICALCVSS v3
Published
March 19, 2021
CVSS v2
6.8 MEDIUM
Affected
8 projects
Assigned by
MITRE
Severity scale
010
Description
Kramdown before 2.3.1 does not restrict Rouge formatters to the Rouge::Formatters namespace, and thus arbitrary classes can be instantiated.
gitlab-org/gitlabGitLabGitLab is the open-source DevSecOps platform that provides a complete software development lifecycle toolchain including source control, CI/CD, security scanning, and project management in a single application.
GitLabGitLab is the open-source DevSecOps platform that provides a complete software development lifecycle toolchain including source control, CI/CD, security scanning, and project management in a single application.NVD
kramdown
RubyGemskramdown is yet-another-markdown-parser but fast, pure Ruby,
using a strict syntax definition and supporting several common extensions.
RubyGemskramdown is yet-another-markdown-parser but fast, pure Ruby,
using a strict syntax definition and supporting several common extensions.
< 2.3.1NVD
GitHub
Crates.io
Docker Hub
NPM