Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

10 records

Vendor: GitHub Component: Cmark-gfm Clear all filters
TI-2024-14669 CVE-2024-22051 · GHSA-fmx4-26r3-wxpf

CommonMarker Integer Overflow Vulnerability

Priority MEDIUM 46

CommonMarker versions prior to 0.23.4 are at risk of an integer overflow vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0145 Published 2024-01-04 Partial fix · 0.23.4 CWE-190
TI-2023-19072 CVE-2023-37463

Quadratic complexity bugs may lead to a denial of service

Priority HIGH 66

cmark-gfm is an extended version of the C reference implementation of CommonMark, a rationalized version of Markdown syntax with a spec.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00696 Published 2023-07-13 Fixed in 0.29.0.gfm.12 CWE-400
TI-2023-08734 CVE-2023-22485

cmark-gfm out-of-bounds read in validate_protocol

Priority MEDIUM 63

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0073 Published 2023-01-24 Fixed in 0.29.0.gfm.7 CWE-125
TI-2022-18588 CVE-2022-39209

Uncontrolled Resource Consumption in cmark-gfm

Priority MEDIUM 43

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02151 Published 2022-09-15 Fixed in 0.29.0.gfm.6 CWE-400