USN-9060-1: kramdown vulnerability

It was discovered that kramdown processed the template option in documents by default. An attacker could possibly use this issue to read arbitrary files or execute arbitrary code.

Quelle: Originalartikel öffnen