CVE-2021-28834

Critical

Advisory

Published 29 Mar 2021In the index since 6 Sept 2026

Remote code execution in Kramdown

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 4 images.

Affected package	Affected versions	Fixed in	Images
kramdowngem	2.2.1, 2.3.0	2.3.1	4

2 by stars

Chart

Latest

Affected images

Radar Score

gollumgeek-cookbook

1 of the 3 container images this version deploys carry CVE-2021-28834.

Container image	Digest	Package	Fixed in
gollumorg/gollum :latest	7cd5305a3cf7	kramdown@2.3.0	2.3.1

4,629

gitlabkubesphere

3 of the 17 container images this version deploys carry CVE-2021-28834.

Container image	Digest	Package	Fixed in
mirrorgitlabcontainers/gitlab-sidekiq-ce :v13.2.2	94d1431683fa	kramdown@2.2.1	2.3.1
mirrorgitlabcontainers/gitlab-task-runner-ce :v13.2.2	9efd73993c34	kramdown@2.2.1	2.3.1
mirrorgitlabcontainers/gitlab-webservice-ce :v13.2.2	30393f990f5c	kramdown@2.2.1	2.3.1

38,133

4 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
gollumorg/gollum :latest	7cd5305a3cf7	kramdown@2.3.0	2.3.1	1
mirrorgitlabcontainers/gitlab-sidekiq-ce :v13.2.2	94d1431683fa	kramdown@2.2.1	2.3.1	1
mirrorgitlabcontainers/gitlab-task-runner-ce :v13.2.2	9efd73993c34	kramdown@2.2.1	2.3.1	1
mirrorgitlabcontainers/gitlab-webservice-ce :v13.2.2	30393f990f5c	kramdown@2.2.1	2.3.1	1