Approved changes feed: RSS · Atom

cpe:2.3:a:jekyllrb:jekyll:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJekyllrb (980c111f-8760-5d3b-856b-9863dd8c8c4a)
ProductJekyll (fc00658f-2f6d-5574-8386-88b17167d98d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/jekyll purl2cpe 2026-06-01 10:12:39.846172
pkg:deb/ubuntu/jekyll purl2cpe 2026-06-01 10:12:39.846176
pkg:gem/ruby/jekyll purl2cpe 2026-06-01 10:12:39.846178
pkg:github/jekyll/jekyll purl2cpe 2026-06-01 10:12:39.846182
pkg:npm/jekyll purl2cpe 2026-06-01 10:12:39.846185
pkg:rpm/fedora/rubygem-jekyll purl2cpe 2026-06-01 10:12:39.846188
pkg:rpm/opensuse/rubygem-jekyll purl2cpe 2026-06-01 10:12:39.846190
pkg:sourceforge/jekyll.mirror purl2cpe 2026-06-01 10:12:39.846193

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-17567 vulnerable 2026-06-08 05:11:06.510928 Details available
Jekyll through 3.6.2, 3.7.x through 3.7.3, and 3.8.x through 3.8.3 allows attackers to access arbitrary files by specifying a symlink in the "include" key in the "_config.yml" file.
Published: 2018-09-28T00:00:00.000Z
Updated: 2024-08-05T10:54:10.268Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.