Skip to content
OpenAdvisories

Product · GitHub

cmark-gfm

10 known vulnerabilities.

cmark-gfm at a glance

Last 12 months
0
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400
All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • Medium 6.4
    CVE-2023-37463

    Quadratic complexity bugs may lead to a denial of service

    cmark-gfm is an extended version of the C reference implementation of CommonMark, a rationalized version of Markdown syntax with a spec. Three polynomial time complexity issues in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of se…

    GitHub cmark-gfm ruby-commonmarker python-cmarkgfm Debian
  • Medium 5.3
    CVE-2023-24824

    Quadratic complexity may lead to a denial of service in cmark-gfm

    cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. A polynomial time complexity issue in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service. This CVE covers quadratic complexity …

    GitHub cmark-gfm ruby-commonmarker python-cmarkgfm Debian Ubuntu Hackage
  • Medium 5.3
    CVE-2023-26485

    Quadratic complexity may lead to a denial of service in cmark-gfm

    cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. A polynomial time complexity issue in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service. This CVE covers quadratic complexity …

    GitHub cmark-gfm ruby-commonmarker cmark-gfm Debian Ubuntu
  • Low 3.5
    CVE-2023-22486

    cmark-gfm Quadratic complexity bug in handle_close_bracket may lead to a denial of service

    cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 contain a polynomial time complexity issue in handle_close_bracket that may lead to unbounded resource exhaustion and subsequent d…

    GitHub cmark-gfm ruby-commonmarker python-cmarkgfm Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2023-22485

    cmark-gfm out-of-bounds read in validate_protocol

    cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. In versions prior 0.29.0.gfm.7, a crafted markdown document can trigger an out-of-bounds read in the `validate_protocol` function. We believe this bug is harmles…

    GitHub cmark-gfm ruby-commonmarker python-cmarkgfm Debian Ubuntu
  • Low 3.5
    CVE-2023-22484

    Inefficient Quadratic complexity bug in handle_pointy_brace may lead to a denial of service

    cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 are subject to a polynomial time complexity issue in cmark-gfm that may lead to unbounded resource exhaustion and subsequent denia…

    GitHub cmark-gfm ruby-commonmarker python-cmarkgfm Debian Ubuntu
  • Low 3.5
    CVE-2023-22483

    cmark-gfm Quadratic complexity bugs may lead to a denial of service

    cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 are subject to several polynomial time complexity issues in cmark-gfm that may lead to unbounded resource exhaustion and subsequen…

    GitHub cmark-gfm ruby-commonmarker python-cmarkgfm Debian Ubuntu
  • High 7.5
    CVE-2022-39209

    Uncontrolled Resource Consumption in cmark-gfm

    cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. In versions prior to 0.29.0.gfm.6 a polynomial time complexity issue in cmark-gfm's autolink extension may lead to unbounded resource exhaustion and subsequent d…

    GitHub cmark-gfm ruby-commonmarker python-cmarkgfm Debian Ubuntu
  • High 8.8
    CVE-2022-24724

    Integer overflow in table parsing extension leads to heap memory corruption

    cmark-gfm is GitHub's extended version of the C reference implementation of CommonMark. Prior to versions 0.29.0.gfm.3 and 0.28.3.gfm.21, an integer overflow in cmark-gfm's table row parsing `table.c:row_from_string` may lead to heap memory corruption when pa…

    GitHub cmark-gfm ruby-commonmarker python-cmarkgfm Debian Ubuntu
  • Medium 6.5
    CVE-2020-5238

    Denial of service in table parsing in cmark-gfm

    The table extension in GitHub Flavored Markdown before version 0.29.0.gfm.1 takes O(n * n) time to parse certain inputs. An attacker could craft a markdown table which would take an unreasonably long time to process, causing a denial of service. This issue do…

    GitHub cmark-gfm ruby-commonmarker r-cran-commonmark Debian Ubuntu