Package: ruby-redcloth Severity: grave Tags: security This was assigned CVE-2012-6684 (only recently, but since the bug was initially discovered in 2012, it received an ID from back then): http://co3k.org/blog/redcloth-unfixed-xss-en Cheers, Moritz