CVE-2020-5238

The table extension in GitHub Flavored Markdown before version 0.29.0.gfm.1
takes O(n * n) time to parse certain inputs. An attacker could craft a
markdown table which would take an unreasonably long time to process,
causing a denial of service. This issue does not affect the upstream cmark
project. The issue has been fixed in version 0.29.0.gfm.1.

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=965984&gt;
• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=965983&gt;
• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=965981&gt;
• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=965982&gt;
• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=965980&gt;