| Package | Affected versions | Patched versions |
|---|---|---|
| cmark-gfm | < 0.29.0.gfm.12 | 0.29.0.gfm.12 |
cmark-gfm is an extended version of the C reference implementation of CommonMark, a rationalized version of Markdown syntax with a spec. Three polynomial time complexity issues in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service. These vulnerabilities have been patched in 0.29.0.gfm.12.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free