github cmark-gfm vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv3

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions before 0.29.0.gfm.7 are subject to several polynomial time complexity issues in cmark-gfm that may lead to unbounded resource exhaustion and subsequent denial of servic...

Github Cmark-gfm

7.5

CVSSv3

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions before 0.29.0.gfm.7 are subject to a polynomial time complexity issue in cmark-gfm that may lead to unbounded resource exhaustion and subsequent denial of service. This...

Github Cmark-gfm

5.3

CVSSv3

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. In versions prior 0.29.0.gfm.7, a crafted markdown document can trigger an out-of-bounds read in the `validate_protocol` function. We believe this bug is harmless in practice, b...

Github Cmark-gfm

7.5

CVSSv3

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions before 0.29.0.gfm.7 contain a polynomial time complexity issue in handle_close_bracket that may lead to unbounded resource exhaustion and subsequent denial of service. ...

Github Cmark-gfm

7.5

CVSSv3

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. A polynomial time complexity issue in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service. This CVE covers quadratic complexity issues when pars...

Github Cmark-gfm

7.5

CVSSv3

cmark-gfm is an extended version of the C reference implementation of CommonMark, a rationalized version of Markdown syntax with a spec. Three polynomial time complexity issues in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service. These vulnerab...

Github Cmark-gfm

7.5

CVSSv3

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. A polynomial time complexity issue in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service. This CVE covers quadratic complexity issues when pars...

Github Cmark-gfm

9.8

CVSSv3

CommonMarker versions before 0.23.4 are at risk of an integer overflow vulnerability. This vulnerability can result in possibly unauthenticated remote malicious users to cause heap memory corruption, potentially leading to an information leak or remote code execution, via parsing...

Github Cmark-gfm Gjtorikian Commonmarker

9.8

CVSSv3

cmark-gfm is GitHub's extended version of the C reference implementation of CommonMark. Prior to versions 0.29.0.gfm.3 and 0.28.3.gfm.21, an integer overflow in cmark-gfm's table row parsing `table.c:row_from_string` may lead to heap memory corruption when parsing table...

Github Cmark-gfm Fedoraproject Fedora 34 Fedoraproject Fedora 35 Fedoraproject Fedora 36

6.5

CVSSv3

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. In versions before 0.29.0.gfm.6 a polynomial time complexity issue in cmark-gfm's autolink extension may lead to unbounded resource exhaustion and subsequent denial of serv...

Github Cmark-gfm Fedoraproject Fedora 35 Fedoraproject Fedora 36 Fedoraproject Fedora 37

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook