{"action":"Upgrade redcarpet to 3.5.1 or later.","affected":[{"fixed":"3.5.1","introduced":"0"}],"component":"redcarpet","cve_ids":["CVE-2020-26298"],"ecosystem":"RubyGems","epss":0.01589,"exploited":false,"fixed_versions":["3.5.1"],"ghsa_id":"GHSA-q3wr-qw3g-3p4h","id":"tcs_01M5KEMSQMSK2KNS3MZYDSK15G","modified_at":"2026-07-08T05:59:45.900047476Z","published_at":"2021-01-11T19:06:10Z","references":["https://osv.dev/vulnerability/GHSA-q3wr-qw3g-3p4h","https://nvd.nist.gov/vuln/detail/CVE-2020-26298","https://github.com/vmg/redcarpet/commit/a699c82292b17c8e6a62e1914d5eccc252272793","https://github.com/advisories/GHSA-q3wr-qw3g-3p4h","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/redcarpet/CVE-2020-26298.yml","https://github.com/vmg/redcarpet","https://github.com/vmg/redcarpet/blob/master/CHANGELOG.md#version-351-security","https://lists.debian.org/debian-lts-announce/2021/01/msg00014.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFMYDIONVWATY7EB6EARDVXT47AYCRNM","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNO4ZZUPGAEUXKQL4G2HRIH7CUZKPCT6","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PXNNWHHAPREDM3XJDACYRTK7DBMUONBI","https://rubygems.org/gems/redcarpet","https://www.debian.org/security/2021/dsa-4831"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-q3wr-qw3g-3p4h","url":"https://osv.dev/vulnerability/GHSA-q3wr-qw3g-3p4h"}],"summary":"Injection/XSS in Redcarpet"}