Redcarpet Project Redcarpet — known CVE vulnerabilities

Every CVE whose affected-product data names Redcarpet Project Redcarpet, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2015-5147 — CVSS 7.5 (high): Stack-based buffer overflow in the header_anchor function in the HTML renderer in Redcarpet before 3.3.2 allows attackers to cause a denial…
• CVE-2020-26298 — CVSS 6.8 (medium): Redcarpet is a Ruby library for Markdown processing. In Redcarpet before version 3.5.1, there is an injection vulnerability which can…