Skip to content
OpenAdvisories
Medium DLA-3507-1 1 CVE

pandoc - security update

Published Jul 25, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 pandoc 2.2.1-3+deb10u1

Vulnerabilities 1

  • Medium 6.0
    CVE-2023-35936

    Arbitrary file write is possible in Pandoc when using PDF output or --extract-media with untrusted input

    Pandoc is a Haskell library for converting from one markup format to another, and a command-line tool that uses this library. Starting in version 1.13 and prior to version 3.1.4, Pandoc is susceptible to an arbitrary file write vulnerability, which can be tri…

    jgm pandoc pandoc pandoc Debian Ubuntu Hackage