VYPR

Asciidoctor Include Ext

by Jirutka

Source repositories

CVEs (1)

  • CVE-2022-24803CriApr 1, 2022
    risk 0.58cvss 10.0epss 0.03

    Asciidoctor-include-ext is Asciidoctor’s standard include processor reimplemented as an extension. Versions prior to 0.4.0, when used to render user-supplied input in AsciiDoc markup, may allow an attacker to execute arbitrary system commands on the host operating system. This…