cmark-gfm vulnerabilities

CVEs whose affected-version data names the cmark-gfm package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2024-22051Critical· 9.8

2y ago

CommonMarker versions prior to 0.23.4 are at risk of an integer overflow vulnerability

CommonMarker versions prior to 0.23.4 are at risk of an integer overflow vulnerability. This vulnerability can result in possibly unauthenticated remote attackers to cause heap memory corruption, potentially leading to an information lea…

▾ Midnightgithub · cmark-gfmEPSS 1.5%via NVD