{"action":"Upgrade commonmarker to 0.23.6 or later.","affected":[{"fixed":"0.23.6","introduced":"0"}],"component":"commonmarker","cve_ids":[],"ecosystem":"RubyGems","exploited":false,"fixed_versions":["0.23.6"],"ghsa_id":"GHSA-4qw4-jpp4-8gvp","id":"tcs_01M5KEGPP5S2NEJAFDHBWNS0AY","modified_at":"2024-12-02T05:40:51.750783Z","published_at":"2022-09-21T18:18:05Z","references":["https://osv.dev/vulnerability/GHSA-4qw4-jpp4-8gvp","https://github.com/gjtorikian/commonmarker/security/advisories/GHSA-4qw4-jpp4-8gvp","https://github.com/gjtorikian/commonmarker/pull/190","https://github.com/gjtorikian/commonmarker","https://github.com/gjtorikian/commonmarker/releases/tag/v0.23.6"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-4qw4-jpp4-8gvp","url":"https://osv.dev/vulnerability/GHSA-4qw4-jpp4-8gvp"}],"summary":"Unbounded resource exhaustion in cmark-gfm autolink extension may lead to denial of service"}