Security Vulnerability with Thor.

[leonaAtkins]

This issue highlights a moderate-level security vulnerability identified within our Middleman 4.5.1 deployment, potentially linked to the CVE-2025-26465, affecting the OpenSSH client and its dependencies, particularly Thor.

Priority
Moderate - This vulnerability could potentially impact system security and data integrity. While direct exploitation hasn't been confirmed, proactive investigation and mitigation are crucial to prevent future security incidents.

[leonaAtkins]

Unfortunatly, just updating to 4.6.2 while fixing the security issue, doesn't allow the server to build, as it breaks links in Markdown, and instead of rnderering them, just gives the error undefined method 'link_to' for nil as discussed in this issue. middleman/middleman#2818

[leonaAtkins]

You may be able to fix this by replacing the RedCarpet markdown engine with Kramdown.