gjtorikian/commonmarker

Releases138

Frequency4 weeks 1 day

Last Release about 1 month ago

Stars551

Ruby wrapper for the comrak (CommonMark parser) Rust crate

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-22051 ↗	Jan 4, 2024Thursday, 4 January 2024, 21:15	9.8 CRITICAL	—
CommonMarker versions prior to 0.23.4 are at risk of an integer overflow vulnerability. This vulnerability can result in possibly unauthenticated remote attackers to cause heap memory corruption, potentially leading to an information leak or remote code execution, via parsing tables with marker rows that contain more than UINT16_MAX columns.