Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/kramdown@1.4.0
purl pkg:gem/kramdown@1.4.0
Next non-vulnerable version 2.3.1
Latest non-vulnerable version 2.3.1
Risk 4.5
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-htr5-swgx-7fcy
Aliases:
CVE-2020-14001
GHSA-mqm2-cgpr-p4m6
2.3.0
Affected by 1 other vulnerability.
VCID-k7yk-y5mq-zbec
Aliases:
CVE-2021-28834
GHSA-52p9-v744-mwjj
2.3.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-13T09:20:47.542918+00:00 Ruby Importer Affected by VCID-htr5-swgx-7fcy https://github.com/rubysec/ruby-advisory-db/blob/master/gems/kramdown/CVE-2020-14001.yml 38.6.0
2026-06-12T17:35:29.845882+00:00 GitLab Importer Affected by VCID-k7yk-y5mq-zbec https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/kramdown/CVE-2021-28834.yml 38.6.0
2026-06-12T17:23:01.868907+00:00 GitLab Importer Affected by VCID-htr5-swgx-7fcy https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/kramdown/CVE-2020-14001.yml 38.6.0