Read the docs

GitHub

Records179All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical24CVSS 9.0–10.0
CVSS high80CVSS 7.0–8.9

Exploited now

GitHub records in CISA KEV

No GitHub vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

10 records in Cmark-gfm · all components

Priority HIGH 66

cmark-gfm is an extended version of the C reference implementation of CommonMark, a rationalized version of Markdown syntax with a spec.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00696 Published 2023-07-13 Fixed in 0.29.0.gfm.12 CWE-400
Priority MEDIUM 63

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0073 Published 2023-01-24 Fixed in 0.29.0.gfm.7 CWE-125
TI-2024-14669 CVE-2024-22051 · GHSA-fmx4-26r3-wxpf

CommonMarker Integer Overflow Vulnerability

Priority MEDIUM 46

CommonMarker versions prior to 0.23.4 are at risk of an integer overflow vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0145 Published 2024-01-04 Partial fix · 0.23.4 CWE-190
Priority MEDIUM 43

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02151 Published 2022-09-15 Fixed in 0.29.0.gfm.6 CWE-400
Open these records in search →