Skip to content
OpenAdvisories
Medium DLA-2526-1 1 CVE

ruby-redcarpet - security update

Published Jan 15, 2021 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 ruby-redcarpet 3.3.4-2+deb9u1

Vulnerabilities 1

  • Medium 6.8
    CVE-2020-26298

    Injection in Redcarpet

    Redcarpet is a Ruby library for Markdown processing. In Redcarpet before version 3.5.1, there is an injection vulnerability which can enable a cross-site scripting attack. In affected versions no HTML escaping was being performed when processing quotes. This …

    vmg redcarpet redcarpet ruby-redcarpet Debian RubyGems