RubyGems/commonmarker: medium

Commonmarker vulnerable to to several quadratic complexity bugs that may lead to denial of service

Action: Upgrade commonmarker to 0.23.9 or later.

bundle update commonmarker

Affected

Fixed versions

Sources

• osv: GHSA-48wp-p9qv-4j64
• https://github.com/github/cmark-gfm/security/advisories/GHSA-66g8-4hjf-77xh
• https://github.com/github/cmark-gfm/security/advisories/GHSA-r8vr-c48j-fcc5
• https://github.com/gjtorikian/commonmarker/security/advisories/GHSA-48wp-p9qv-4j64
• https://github.com/gjtorikian/commonmarker/pull/236
• https://github.com/github/cmark-gfm/releases/tag/0.29.0.gfm.10
• https://github.com/github/cmark-gfm/releases/tag/0.29.0.gfm.11
• https://github.com/gjtorikian/commonmarker
• https://github.com/gjtorikian/commonmarker/releases/tag/v0.23.9

published 2023-04-11T22:08:18Z · modified 2024-12-04T05:41:10.781623Z · JSON