cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 are subject to a polynomial time complexity issue in cmark-gfm that may lead to unbounded resource exhaustion and subsequent denial of service. This vulnerability has been patched in 0.29.0.gfm.7.
References
Link | Resource |
---|---|
https://github.com/github/cmark-gfm/security/advisories/GHSA-24f7-9frr-5h2r | Exploit Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: GitHub_M
Published: 2023-01-23T22:42:57.790Z
Updated:
Reserved: 2022-12-29T17:41:28.088Z
Link: CVE-2023-22484
JSON object: View
NVD Information
Status : Analyzed
Published: 2023-01-23T23:15:10.423
Modified: 2023-02-02T14:06:41.013
Link: CVE-2023-22484
JSON object: View
Redhat Information
No data.