RubyGems/commonmarker: medium

Several quadratic complexity bugs may lead to denial of service in Commonmarker

Action: Upgrade commonmarker to 0.23.10 or later.

bundle update commonmarker

Affected

Fixed versions

Sources

• osv: GHSA-7vh7-fw88-wj87
• https://github.com/gjtorikian/commonmarker/security/advisories/GHSA-7vh7-fw88-wj87
• https://github.com/gjtorikian/commonmarker/commit/db8cd377b54541f7fd484d168b7682a282a680f7
• https://github.com/github/cmark-gfm/releases/tag/0.29.0.gfm.12
• https://github.com/gjtorikian/commonmarker
• https://rubygems.org/gems/commonmarker/versions/0.23.10

published 2023-08-08T17:12:00Z · modified 2024-12-01T05:31:38.658446Z · JSON