Ubuntu Security Notice 6424-1 - It was discovered that kramdown did not restrict Rouge formatters to the correct namespace. An attacker could use this issue to cause kramdown to execute arbitrary code.
cb84ed93ee82dec6af195f72986f8154e0b895e8bab9ab6209eb559862c1420d