{"action":"Upgrade commonmarker to 0.23.4 or later.","affected":[{"fixed":"0.23.4","introduced":"0"}],"component":"commonmarker","cve_ids":["CVE-2024-22051"],"ecosystem":"RubyGems","epss":0.0145,"exploited":false,"fixed_versions":["0.23.4"],"ghsa_id":"GHSA-fmx4-26r3-wxpf","id":"tcs_01M5KEK3R3B9BF06MSNGZ43HRS","modified_at":"2026-05-14T21:03:46.567733Z","published_at":"2022-03-03T20:28:47Z","references":["https://osv.dev/vulnerability/GHSA-fmx4-26r3-wxpf","https://github.com/github/cmark-gfm/security/advisories/GHSA-mc3g-88wq-6f4x","https://github.com/gjtorikian/commonmarker/security/advisories/GHSA-fmx4-26r3-wxpf","https://nvd.nist.gov/vuln/detail/CVE-2024-22051","https://github.com/gjtorikian/commonmarker/commit/ab4504fd17460627a6ab255bc3c63e8e5fc6aed3","https://github.com/gjtorikian/commonmarker","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/commonmarker/CVE-2024-22051.yml"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-fmx4-26r3-wxpf","url":"https://osv.dev/vulnerability/GHSA-fmx4-26r3-wxpf"}],"summary":"Integer overflow in cmark-gfm table parsing extension leads to heap memory corruption"}