SUSE CVE-2018-18385

Asciidoctor in versions 1.5.8 allows remote attackers to cause a denial of service infinite loop. The loop was caused by the fact that Parser.nextblock was not exhausting all the lines in the reader as the while loop expected it would. This was happening because the regular expression that detect...

Asciidoctor Denial of Service Vulnerability

Asciidoctor is a text processor written in Ruby that supports converting AsciiDoc content to HTML5, DocBook and other formats. A security vulnerability exists in Asciidoctor version 1.5.7.1, which stems from Parsernextblock failing to use the 'while true' statement correctly. A remote attacker ca...