https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 20:44:35 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-03625 bdu:2021-03625 https://cve.radiocsirt.org/vuln/bdu:2021-03625 https://cve.radiocsirt.org/vuln/euvd-2026-215941 EUVD-2026-215941 https://cve.radiocsirt.org/vuln/euvd-2026-215941 https://cve.radiocsirt.org/vuln/fkie_cve-2020-26298 <p>Redcarpet is a Ruby library for Markdown processing. In Redcarpet before version 3.5.1, there is an injection vulnerability which can enable a cross-site scripting attack. In affected versions no HTML escaping was being performed when processing quotes. This applies even when the `:escape_html` option was being used. This is fixed in version 3.5.1 by the referenced commit.</p> <p>Redcarpet is a Ruby library for Markdown processing. In Redcarpet before version 3.5.1, there is an injection vulnerability which can enable a cross-site scripting attack. In affected versions no HTML escaping was being performed when processing quotes. This applies even when the `:escape_html` option was being used. This is fixed in version 3.5.1 by the referenced commit.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-26298 https://cve.radiocsirt.org/vuln/ghsa-q3wr-qw3g-3p4h <p><strong>Affected:</strong> RubyGems: redcarpet</p> <p>Redcarpet is a Ruby library for Markdown processing. In Redcarpet before version 3.5.1, there is an injection vulnerability which can enable a cross-site scripting attack. In affected versions no HTML escaping was being performed when processing quotes. This applies even when the `:escape_html` option was being used. This is fixed in version 3.5.1 by the referenced commit.</p> <p><strong>Affected:</strong> RubyGems: redcarpet</p> <p>Redcarpet is a Ruby library for Markdown processing. In Redcarpet before version 3.5.1, there is an injection vulnerability which can enable a cross-site scripting attack. In affected versions no HTML escaping was being performed when processing quotes. This applies even when the `:escape_html` option was being used. This is fixed in version 3.5.1 by the referenced commit.</p> https://cve.radiocsirt.org/vuln/ghsa-q3wr-qw3g-3p4h https://cve.radiocsirt.org/vuln/gsd-2020-26298 gsd-2020-26298 https://cve.radiocsirt.org/vuln/gsd-2020-26298 https://cve.radiocsirt.org/vuln/oesa-2021-1175 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: rubygem-redcarpet</p> <p>A fast, safe and extensible Markdown to (X)HTML parser. Security Fix(es): Redcarpet is a Ruby library for Markdown processing. In Redcarpet before version 3.5.1, there is an injection vulnerability which can enable a cross-site scripting attack. In affected versions no HTML escaping was being performed when processing quotes. This applies even when the `:escape_html` option was being used. This is fixed in version 3.5.1 by the referenced commit.(CVE-2020-26298)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: rubygem-redcarpet</p> <p>A fast, safe and extensible Markdown to (X)HTML parser. Security Fix(es): Redcarpet is a Ruby library for Markdown processing. In Redcarpet before version 3.5.1, there is an injection vulnerability which can enable a cross-site scripting attack. In affected versions no HTML escaping was being performed when processing quotes. This applies even when the `:escape_html` option was being used. This is fixed in version 3.5.1 by the referenced commit.(CVE-2020-26298)</p> https://cve.radiocsirt.org/vuln/oesa-2021-1175 https://cve.radiocsirt.org/vuln/suse-su-2021:3728-1 <p>Security update for ardana-ansible, ardana-monasca, documentation-suse-openstack-cloud, openstack-ec2-api, openstack-heat-templates, python-Django, python-monasca-common, rubygem-redcarpet, rubygem-puma</p> <p>Security update for ardana-ansible, ardana-monasca, documentation-suse-openstack-cloud, openstack-ec2-api, openstack-heat-templates, python-Django, python-monasca-common, rubygem-redcarpet, rubygem-puma</p> https://cve.radiocsirt.org/vuln/suse-su-2021:3728-1