RubyGems/asciidoctor CVE-2018-18385: high 7.5, EPSS 2.25%

Asciidoctor Infinite Loop vulnerability

Action: Upgrade asciidoctor to 1.5.8 or later.

bundle update asciidoctor

Affected

Fixed versions

Sources

• osv: GHSA-qc9p-mjxm-j2wj
• https://nvd.nist.gov/vuln/detail/CVE-2018-18385
• https://github.com/asciidoctor/asciidoctor/issues/2888
• https://github.com/asciidoctor/asciidoctor
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/asciidoctor/CVE-2018-18385.yml

CVE-2018-18385 · published 2022-05-13T01:50:40Z · modified 2023-11-08T04:00:05.305431Z · JSON