Read the docs

Redcarpet Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Redcarpet Project records in CISA KEV

No Redcarpet Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Redcarpet 2 records LOW

Records

2 records

TI-2015-04316 CVE-2015-5147 · GHSA-7322-9mx6-5j2m

Stack-based buffer overflow in the header_anchor function in the HTML renderer in…

Priority LOW 38

Stack-based buffer overflow in the header_anchor function in the HTML renderer in Redcarpet before 3.3.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02538 Published 2015-07-14 Fixed in 3.3.2 CWE-119
TI-2020-16119 CVE-2020-26298 · GHSA-q3wr-qw3g-3p4h

Injection in Redcarpet

Priority LOW 33

Redcarpet is a Ruby library for Markdown processing.

CVSS 3.1MEDIUM 6.8 Network Low privileges User interaction EPSS 0.01589 Published 2021-01-11 Partial fix · 3.5.1 CWE-74
Open these records in search →