| Package | Affected versions | Patched versions |
|---|---|---|
| md4c | = 0.2.5 |
md4c 0.2.5 has a heap-based buffer over-read because md_is_named_entity_contents has an off-by-one error.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free