https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T19:08:45.568831+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-03178 bdu:2021-03178 2026-10-22T19:08:45.579617+00:00 bdu:2021-03178 https://cve.radiocsirt.org/vuln/brew-um-cve-2020-14001 BREW-um-CVE-2020-14001 — Unintended read access in kramdown gem 2026-10-22T19:08:45.579675+00:00

Affected: Homebrew: um

The kramdown gem before 2.3.0 for Ruby processes the template option inside Kramdown documents by default, which allows unintended read access (such as template="/etc/passwd") or unintended embedded Ruby code execution (such as a string that begins with template="string://<%= `). NOTE: kramdown is used in Jekyll, GitLab Pages, GitHub Pages, and Thredded Forum.

 https://cve.radiocsirt.org/vuln/euvd-2026-42161 EUVD-2026-42161 2026-10-22T19:08:45.579725+00:00 EUVD-2026-42161 https://cve.radiocsirt.org/vuln/fkie_cve-2020-14001 fkie_cve-2020-14001 2026-10-22T19:08:45.579747+00:00

The kramdown gem before 2.3.0 for Ruby processes the template option inside Kramdown documents by default, which allows unintended read access (such as template="/etc/passwd") or unintended embedded Ruby code execution (such as a string that begins with template="string://<%= `). NOTE: kramdown is used in Jekyll, GitLab Pages, GitHub Pages, and Thredded Forum.

 https://cve.radiocsirt.org/vuln/ghsa-mqm2-cgpr-p4m6 GHSA-mqm2-cgpr-p4m6 — Unintended read access in kramdown gem 2026-10-22T19:08:45.579814+00:00

Affected: RubyGems: kramdown

The kramdown gem before 2.3.0 for Ruby processes the template option inside Kramdown documents by default, which allows unintended read access (such as template="/etc/passwd") or unintended embedded Ruby code execution (such as a string that begins with template="string://<%= `). NOTE: kramdown is used in Jekyll, GitLab Pages, GitHub Pages, and Thredded Forum.

 https://cve.radiocsirt.org/vuln/gsd-2020-14001 gsd-2020-14001 2026-10-22T19:08:45.579837+00:00 gsd-2020-14001 https://cve.radiocsirt.org/vuln/oesa-2021-1280 OESA-2021-1280 — rubygem-kramdown security update 2026-10-22T19:08:45.579849+00:00

Affected: openEuler:20.03-LTS-SP1: rubygem-kramdown, openEuler:20.03-LTS-SP2: rubygem-kramdown

kramdown is yet-another-markdown-parser but fast, pure Ruby, using a strict syntax definition and supporting several common extensions. Security Fix(es): The kramdown gem before 2.3.0 for Ruby processes the template option inside Kramdown documents by default, which allows unintended read access (such as template=&quot;/etc/passwd&quot;) or unintended embedded Ruby code execution (such as a string that begins with template=&quot;string://&lt;%= `). NOTE: kramdown is used in Jekyll, GitLab Pages, GitHub Pages, and Thredded Forum.(CVE-2020-14001)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11336-1 openSUSE-SU-2024:11336-1 — ruby2.7-rubygem-kramdown-2.3.1-1.3 on GA media 2026-10-22T19:08:45.579873+00:00

ruby2.7-rubygem-kramdown-2.3.1-1.3 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2022:3259-1 SUSE-SU-2022:3259-1 — Security update for rubygem-kramdown 2026-10-22T19:08:45.579890+00:00

Security update for rubygem-kramdown

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-14001 UBUNTU-CVE-2020-14001 2026-10-22T19:08:45.579903+00:00

Affected: Ubuntu:16.04:LTS: ruby-kramdown, Ubuntu:18.04:LTS: ruby-kramdown, Ubuntu:20.04:LTS: ruby-kramdown

The kramdown gem before 2.3.0 for Ruby processes the template option inside Kramdown documents by default, which allows unintended read access (such as template="/etc/passwd") or unintended embedded Ruby code execution (such as a string that begins with template="string://<%= `). NOTE: kramdown is used in Jekyll, GitLab Pages, GitHub Pages, and Thredded Forum.