Lucene search
+L

6 matches found

OSV
OSV
•added 2023/09/22 7:59 p.m.•40 views

GHSA-M9XQ-6H2J-65R2 Markdown vulnerable to Out-of-bounds Read while parsing citations

Summary Parsing malformed markdown input with parser that uses parser.Mmark extension could result in out-of-bounds read vulnerability. Details To exploit the vulnerability, parser needs to have parser.Mmark extension set. The panic occurs inside the citation.go file on the line 69 when the parse...

7.5CVSS7.2AI score0.01252EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2023/09/22 7:59 p.m.•38 views

Markdown vulnerable to Out-of-bounds Read while parsing citations

Summary Parsing malformed markdown input with parser that uses parser.Mmark extension could result in out-of-bounds read vulnerability. Details To exploit the vulnerability, parser needs to have parser.Mmark extension set. The panic occurs inside the citation.go file on the line 69 when the parse...

7.5CVSS7.2AI score0.01252EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2023/09/22 5:15 p.m.•16 views

AZL-39828 CVE-2023-42821 affecting package cri-o for versions less than 1.21.7-2

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Prior to pseudoversion 0.0.0-20230922105210-14b16010c2ee, which corresponds with commit 14b16010c2ee7ff33a940a541d993bd043a88940, parsing malformed markdown input with parser that uses...

7.5CVSS7.1AI score0.01252EPSS
SaveExploits1References1
OSV
OSV
•added 2023/09/22 5:15 p.m.•21 views

UBUNTU-CVE-2023-42821

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Prior to pseudoversion 0.0.0-20230922105210-14b16010c2ee, which corresponds with commit 14b16010c2ee7ff33a940a541d993bd043a88940, parsing malformed markdown input with parser that uses...

7.5CVSS5.8AI score0.01252EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2023/09/22 12:00 a.m.•15 views

Markdown Buffer Error Vulnerability

Markdown is gomarkdown open source a Go library for parsing Markdown text and rendering it as HTML. Previous versions of gomarkdown/markdown 0.0.0-20230922105210-14b16010c2ee had a buffer error vulnerability that stemmed from an out-of-bounds read vulnerability when parsing incorrectly formatted...

7.5CVSS7.1AI score0.01252EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/09/22 12:00 a.m.•13 views

PT-2023-28606

Name of the Vulnerable Software and Affected Versions github.com/gomarkdown/markdown versions prior to 0.0.0-20230922105210-14b16010c2ee Description The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Parsing malformed markdown input with a...

9.8CVSS7.3AI score0.01252EPSS
SaveExploits1References60
Rows per page
Query Builder