CVE:CVE-2021-28834
CNNVD:CNNVD-202103-1215
Thomas Leitner kramdown是  （Thomas Leitner）开源的一个应用程序。提供一个快速的纯Ruby Markdown超集转换器，使用严格的语法定义并支持几个常用扩展。
Kramdown before 2.3.1 存在安全漏洞，该漏洞源于Kramdown没有将Rouge格式化器限制为Rouge:: formatters名称空间。
solution:Upgrade kramdown_project kramdown to a higher version than 2.3.1,and avoid the version (,2.3.1); Upgrade fedoraproject fedora to a higher version than 32,33,34,and avoid the version 32,33,34; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0