| Package | Affected versions | Patched versions |
|---|---|---|
| cmark-gfm | < 0.29.0.gfm.7 | 0.29.0.gfm.7 |
cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 contain a polynomial time complexity issue in handle_close_bracket that may lead to unbounded resource exhaustion and subsequent denial of service. This vulnerability has been patched in 0.29.0.gfm.7.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free