Skip to content
OpenAdvisories

Package · RubyGems

commonmarker

5 known vulnerabilities.

5 results · Feed

  • Critical 9.8

    CommonMarker Integer Overflow Vulnerability

    CommonMarker versions prior to 0.23.4 are at risk of an integer overflow vulnerability. This vulnerability can result in possibly unauthenticated remote attackers to cause heap memory corruption, potentially leading to an information leak or remote code execu…

  • Medium —

    Several quadratic complexity bugs may lead to denial of service in Commonmarker

    ## Impact Several quadratic complexity bugs in commonmarker's underlying [`cmark-gfm`](https://github.com/github/cmark-gfm) library may lead to unbounded resource exhaustion and subsequent denial of service. The following vulnerabilities were addressed: * [CV…

  • Medium —

    Commonmarker vulnerable to to several quadratic complexity bugs that may lead to denial of service

    ## Impact Several quadratic complexity bugs in commonmarker's underlying [`cmark-gfm`](https://github.com/github/cmark-gfm) library may lead to unbounded resource exhaustion and subsequent denial of service. The following vulnerabilities were addressed: * [CV…

  • Medium —

    Several quadratic complexity bugs may lead to denial of service in Commonmarker

    ## Impact Several quadratic complexity bugs in commonmarker's underlying [`cmark-gfm`](https://github.com/github/cmark-gfm) library may lead to unbounded resource exhaustion and subsequent denial of service. The following vulnerabilities were addressed: * [CV…

  • Medium —

    Unbounded resource exhaustion in cmark-gfm autolink extension may lead to denial of service

    ### Impact CommonMarker uses `cmark-gfm` for rendering [Github Flavored Markdown](https://github.github.com/gfm/). A polynomial time complexity issue in cmark-gfm's autolink extension may lead to unbounded resource exhaustion and subsequent denial of service.…