Records179All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical24CVSS 9.0–10.0
CVSS high80CVSS 7.0–8.9
Exploited now
GitHub records in CISA KEVNo GitHub vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 76
cmark-gfm is GitHub's extended version of the C reference implementation of CommonMark.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0451 · Published 2022-03-03 · Fixed in 0.28.3.gfm.21, 0.29.0.gfm.3 CWE-190
Priority HIGH 72
cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01029 · Published 2023-03-31 · Partial fix · 0.29.0.gfm.10 CWE-400
Priority HIGH 72
cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01036 · Published 2023-03-31 · Partial fix · 0.29.0.gfm.10 CWE-400
Priority HIGH 66
cmark-gfm is an extended version of the C reference implementation of CommonMark, a rationalized version of Markdown syntax with a spec.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00696 · Published 2023-07-13 · Fixed in 0.29.0.gfm.12 CWE-400
Priority HIGH 66
cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01119 · Published 2023-01-24 · Fixed in 0.29.0.gfm.7 CWE-400
Priority HIGH 66
cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00966 · Published 2023-01-23 · Fixed in 0.29.0.gfm.7 CWE-400
Priority HIGH 66
cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01085 · Published 2023-01-23 · Fixed in 0.29.0.gfm.7 CWE-400
Priority MEDIUM 63
cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0073 · Published 2023-01-24 · Fixed in 0.29.0.gfm.7 CWE-125
Priority MEDIUM 46
CommonMarker versions prior to 0.23.4 are at risk of an integer overflow vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0145 · Published 2024-01-04 · Partial fix · 0.23.4 CWE-190
Priority MEDIUM 43
cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02151 · Published 2022-09-15 · Fixed in 0.29.0.gfm.6 CWE-400
Open these records in search →