Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/kramdown@1.17.0
purl pkg:gem/kramdown@1.17.0
Next non-vulnerable version 2.3.1
Latest non-vulnerable version 2.3.1
Risk
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-ckq5-uutm-cfat
Aliases:
CVE-2020-14001
GHSA-mqm2-cgpr-p4m6
2.3.0
Affected by 1 other vulnerability.
VCID-gg7k-665m-ckee
Aliases:
CVE-2021-28834
GHSA-52p9-v744-mwjj
insufficient validation
2.3.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-01T06:04:48.751362+00:00 GitLab Importer Affected by VCID-gg7k-665m-ckee https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/kramdown/CVE-2021-28834.yml 38.6.0
2026-06-01T05:50:03.092251+00:00 GitLab Importer Affected by VCID-ckq5-uutm-cfat https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/kramdown/CVE-2020-14001.yml 38.6.0
2026-05-31T10:17:07.316704+00:00 Ruby Importer Affected by VCID-ckq5-uutm-cfat https://github.com/rubysec/ruby-advisory-db/blob/master/gems/kramdown/CVE-2020-14001.yml 38.6.0