RubyGems/commonmarker: medium

Unbounded resource exhaustion in cmark-gfm autolink extension may lead to denial of service

Action: Upgrade commonmarker to 0.23.6 or later.

bundle update commonmarker

Affected

Fixed versions

Sources

• osv: GHSA-4qw4-jpp4-8gvp
• https://github.com/gjtorikian/commonmarker/security/advisories/GHSA-4qw4-jpp4-8gvp
• https://github.com/gjtorikian/commonmarker/pull/190
• https://github.com/gjtorikian/commonmarker
• https://github.com/gjtorikian/commonmarker/releases/tag/v0.23.6

published 2022-09-21T18:18:05Z · modified 2024-12-02T05:40:51.750783Z · JSON