CVE-2024-38526

Advisory

The affected version of Mkdocs-gallery is vulnerable to insecure polyfill extra javascript, the fix includes a removal of script referenced in extra_javascript that points to polyfill.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

- **SECURITY** removed insecure polyfill extra javascript from example. Fixes [99](https://github.com/smarie/mkdocs-gallery/issues/99).
- Fixed dead link at the bottom of the generated gallery examples. Fixes [97](https://github.com/smarie/mkdocs-gallery/issues/97).
- Fixed compliance issue with `mkdocs-material`'s [metadata declaration feature](https://squidfunk.github.io/mkdocs-material/reference/#usage). Fixes [96](https://github.com/smarie/mkdocs-gallery/issues/96).

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38526
• https://github.com/smarie/mkdocs-gallery/issues/99
• https://github.com/squidfunk/mkdocs-material/issues/7295