cmark-gfm is an extended version of the C reference implementation of CommonMark, a rationalized version of Markdown syntax with a spec. Three polynomial time complexity issues in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service. These vulnerabilities have been patched in 0.29.0.gfm.12.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: GitHub_M
Published: 2023-07-13T19:22:16.654Z
Updated: 2024-08-02T17:16:30.468Z
Reserved: 2023-07-06T13:01:36.997Z
Link: CVE-2023-37463
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2023-07-13T20:15:09.327
Modified: 2023-07-25T18:37:08.047
Link: CVE-2023-37463
Redhat
No data.