← All advisories

Medium severity6.1NVD Advisory· Published Mar 18, 2021· Updated Jun 17, 2026

CVE-2021-28796

CVE-2021-28796

Description

Increments Qiita::Markdown before 0.33.0 allows XSS in transformers.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
qiita-markdownRubyGems	< 0.33.0	0.33.0

Affected products

3

Increments/Qiita\
cpe:2.3:a:increments:qiita\:\:markdown:*:*:*:*:*:*:*:*
Range: <0.33.0
Qiita/Qiita::Markdowndescription
ghsa-coords
pkg:gem/qiita-markdown
Range: < 0.33.0

Patches

Vulnerability mechanics

References

5

github.com/increments/qiita-markdown/compare/v0.32.0...v0.33.0nvdPatchRelease NotesThird Party AdvisoryWEB
github.com/advisories/GHSA-f2c9-5jqw-3xh3ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-28796ghsaADVISORY
vuln.ryotak.me/advisories/15nvdThird Party AdvisoryWEB
github.com/rubysec/ruby-advisory-db/blob/master/gems/qiita-markdown/CVE-2021-28796.ymlghsaWEB

News mentions

0

No linked articles in our index yet.