Skip to content
OpenAdvisories
Critical DSA-4743-1 1 CVE

ruby-kramdown - security update

Published Aug 10, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 ruby-kramdown 1.17.0-1+deb10u1

Vulnerabilities 1

  • Critical 9.8
    CVE-2020-14001

    Unintended read access in kramdown gem

    The kramdown gem before 2.3.0 for Ruby processes the template option inside Kramdown documents by default, which allows unintended read access (such as template="/etc/passwd") or unintended embedded Ruby code execution (such as a string that begins with templ…

    icinga2 ruby-kramdown kramdown ruby-kramdown Debian Ubuntu Alpine RubyGems