Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-28834

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-52p9-v744-mwjj

Remote code execution in Kramdown Kramdown before 2.3.1 does not restrict Rouge formatters to the Rouge::Formatters namespace, and thus arbitrary classes can be instantiated.

gitlab/gem/kramdown/CVE-2021-28834

Code Injection Kramdown does not restrict Rouge formatters to the `Rouge::Formatters` namespace, and thus arbitrary classes can be instantiated.