Kramdown prior to 2.3.1 does not restrict Rouge formatters to the Rouge::Formatters namespace, and thus arbitrary classes can be instantiated.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
kramdown project kramdown |
||
fedoraproject fedora 32 |
||
fedoraproject fedora 33 |
||
fedoraproject fedora 34 |
||
debian debian linux 10.0 |