Skip to content

Major upgrade for kramdown (Critical) #4

@anshumanbh

Description

@anshumanbh

Find more live information in Aikido here: https://app.aikido.dev/queue?sidebarIssue=2217887&groupId=6189&sidebarIssueTask=53476&sidebarTab=tasks

==== Scope ====
This task includes issues in the following code repository:

  • spicesandmix: Gemfile.lock

==== TLDR ====
kramdown is affected by 2 unique vulnerabilities. 2 are critical.

==== How to fix ====
In order to fix all of these vulnerabilities, update kramdown to >= 2.3.1.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions