{"action":"Upgrade commonmarker to 0.23.9 or later.","affected":[{"fixed":"0.23.9","introduced":"0"}],"component":"commonmarker","cve_ids":[],"ecosystem":"RubyGems","exploited":false,"fixed_versions":["0.23.9"],"ghsa_id":"GHSA-48wp-p9qv-4j64","id":"tcs_01M5KEGJ7DCYNZ2ZV5N0Z0XYS4","modified_at":"2024-12-04T05:41:10.781623Z","published_at":"2023-04-11T22:08:18Z","references":["https://osv.dev/vulnerability/GHSA-48wp-p9qv-4j64","https://github.com/github/cmark-gfm/security/advisories/GHSA-66g8-4hjf-77xh","https://github.com/github/cmark-gfm/security/advisories/GHSA-r8vr-c48j-fcc5","https://github.com/gjtorikian/commonmarker/security/advisories/GHSA-48wp-p9qv-4j64","https://github.com/gjtorikian/commonmarker/pull/236","https://github.com/github/cmark-gfm/releases/tag/0.29.0.gfm.10","https://github.com/github/cmark-gfm/releases/tag/0.29.0.gfm.11","https://github.com/gjtorikian/commonmarker","https://github.com/gjtorikian/commonmarker/releases/tag/v0.23.9"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-48wp-p9qv-4j64","url":"https://osv.dev/vulnerability/GHSA-48wp-p9qv-4j64"}],"summary":"Commonmarker vulnerable to to several quadratic complexity bugs that may lead to denial of service"}