cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 contain a polynomial time complexity issue in handle_close_bracket that may lead to unbounded resource exhaustion and subsequent denial of service. This vulnerability has been patched in 0.29.0.gfm.7.
References
Link | Resource |
---|---|
https://github.com/github/cmark-gfm/security/advisories/GHSA-r572-jvj2-3m8p | Exploit Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: GitHub_M
Published: 2023-01-24T02:30:29.099Z
Updated:
Reserved: 2022-12-29T17:41:28.088Z
Link: CVE-2023-22486
JSON object: View
NVD Information
Status : Modified
Published: 2023-01-26T21:18:12.363
Modified: 2023-11-07T04:07:00.417
Link: CVE-2023-22486
JSON object: View
Redhat Information
No data.