USN-4562-1: kramdown vulnerability
Published Sep 30, 2020
·Updated
It was discovered that kramdown insecurely handled certain crafted input. An attacker could use this vulnerability to read restricted files or execute arbitrary code.
Affected Software
0 affected components
Event History
Feb 23, 2026
Advisory Published
via Ubuntu·07:23 PM
Data Sourced
via Ubuntu·07:23 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this kramdown vulnerability?
The vulnerability ID for this kramdown vulnerability is USN-4562-1.
2
How does the kramdown vulnerability impact the affected software?
The kramdown vulnerability allows an attacker to read restricted files or execute arbitrary code in the affected software.
3
Which versions of kramdown are affected by this vulnerability?
Versions up to and excluding 1.17.0-4ubuntu0.1 of kramdown are affected by this vulnerability.
4
How can I fix the kramdown vulnerability?
To fix the kramdown vulnerability, update to version 1.17.0-4ubuntu0.1 or later of the kramdown package.
5
Where can I find more information about the kramdown vulnerability?
You can find more information about the kramdown vulnerability in the Ubuntu Security Notices USN-4562-2 and on the Ubuntu security advisory page for CVE-2020-14001.