package reviews for Pandoc and CVE-2023-35936