Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS due to several polynomial time complexity issues that may lead to unbounded resource exhaustion. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intende...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the validateprotocol function in extensions/autolink.c, which exposes malloc metadata. NOTE: The maintainers believe this is harmless. PoC sh echo "to:[email protected]" | ./src/cmark-gfm -e autolink Remediation...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound in table-row parsing, when parsing marker rows that contain more than UINT16MAX columns. Note If affected versions are used for rendering remote user-controlled markdown, this vulnerability may lead to...