VYPR

RubyGems package

asciidoctor-include-ext

pkg:gem/asciidoctor-include-ext

Vulnerabilities (1)

  • CVE-2022-24803Mar 31, 2022
    affected < 0.4.0fixed 0.4.0

    Asciidoctor-include-ext is Asciidoctor’s standard include processor reimplemented as an extension. Versions prior to 0.4.0, when used to render user-supplied input in AsciiDoc markup, may allow an attacker to execute arbitrary system commands on the host operating system. This at