cmark-gfm is an extended version of the C reference implementation of CommonMark, a rationalized version of Markdown syntax with a spec. Three polynomial time complexity issues in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service. These vulnerabilities have been patched in 0.29.0.gfm.12.
References
Link | Resource |
---|---|
https://github.com/github/cmark-gfm/releases/tag/0.29.0.gfm.12 | Release Notes |
https://github.com/github/cmark-gfm/security/advisories/GHSA-w4qg-3vf7-m9x5 | Exploit |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: GitHub_M
Published: 2023-07-13T19:22:16.654Z
Updated: 2023-07-13T19:22:16.654Z
Reserved: 2023-07-06T13:01:36.997Z
Link: CVE-2023-37463
JSON object: View
NVD Information
Status : Analyzed
Published: 2023-07-13T20:15:09.327
Modified: 2023-07-25T18:37:08.047
Link: CVE-2023-37463
JSON object: View
Redhat Information
No data.