Skip to content
OpenAdvisories

Package · Ubuntu

ruby-commonmarker

2 known vulnerabilities.

2 results · Feed

  • Critical 9.8

    CommonMarker Integer Overflow Vulnerability

    CommonMarker versions prior to 0.23.4 are at risk of an integer overflow vulnerability. This vulnerability can result in possibly unauthenticated remote attackers to cause heap memory corruption, potentially leading to an information leak or remote code execu…

  • Medium 6.5

    Denial of service in table parsing in cmark-gfm

    The table extension in GitHub Flavored Markdown before version 0.29.0.gfm.1 takes O(n * n) time to parse certain inputs. An attacker could craft a markdown table which would take an unreasonably long time to process, causing a denial of service. This issue do…