https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 00:52:56 +0000 https://vulnerability.circl.lu/vuln/cve-2020-14001 <p>The kramdown gem before 2.3.0 for Ruby processes the template option inside Kramdown documents by default, which allows unintended read access (such as template=&#34;/etc/passwd&#34;) or unintended embedded Ruby code execution (such as a string that begins with template=&#34;string://&lt;%= `). NOTE: kramdown is used in Jekyll, GitLab Pages, GitHub Pages, and Thredded Forum.</p> <p>The kramdown gem before 2.3.0 for Ruby processes the template option inside Kramdown documents by default, which allows unintended read access (such as template=&#34;/etc/passwd&#34;) or unintended embedded Ruby code execution (such as a string that begins with template=&#34;string://&lt;%= `). NOTE: kramdown is used in Jekyll, GitLab Pages, GitHub Pages, and Thredded Forum.</p> https://vulnerability.circl.lu/vuln/cve-2020-14001