Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-48WP-P9QV-4J64
HistoryApr 11, 2023 - 10:08 p.m.

Commonmarker vulnerable to to several quadratic complexity bugs that may lead to denial of service

2023-04-1122:08:18
GitHub Advisory Database
github.com
9
JSON

Impact

Several quadratic complexity bugs in commonmarker’s underlying cmark-gfm library may lead to unbounded resource exhaustion and subsequent denial of service.

The following vulnerabilities were addressed:

For more information, consult the release notes for version 0.23.0.gfm.10 and 0.23.0.gfm.11.

Mitigation

Users are advised to upgrade to commonmarker version 0.23.9.

CPENameOperatorVersion
commonmarkerlt0.23.9

Related

osv 4
veracode 2
prion 2
cve 2
redhatcve 2
debiancve 2
ubuntucve 2
osv
osv
Commonmarker vulnerable to to several quadratic complexity bugs that may lead to denial of service
2023-04-11 22:08:18
CVE-2023-24824
2023-03-31 23:15:07
CVE-2023-26485
2023-03-31 23:15:07
veracode
veracode
Denial Of Service (DoS)
2023-04-11 09:44:35
Denial Of Service (DoS)
2023-04-11 10:08:32
prion
prion
Input validation
2023-03-31 23:15:00
Design/Logic Flaw
2023-03-31 23:15:00
cve
cve
CVE-2023-24824
2023-03-31 23:15:07
CVE-2023-26485
2023-03-31 23:15:07
redhatcve
redhatcve
CVE-2023-24824
2023-05-26 17:10:43
CVE-2023-26485
2023-05-26 17:10:53
debiancve
debiancve
CVE-2023-24824
2023-03-31 23:15:07
CVE-2023-26485
2023-03-31 23:15:07
ubuntucve
ubuntucve
CVE-2023-24824
2023-03-31 00:00:00
CVE-2023-26485
2023-03-31 00:00:00
JSON
Related for GHSA-48WP-P9QV-4J64
osv4veracode2prion2cve2redhatcve2debiancve2ubuntucve2