← CVE Intelligence

CVE-2023-22484

Inefficient Quadratic complexity bug in handle_pointy_brace may lead to a denial of service PUBLISHED

Description (CNA)

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 are subject to a polynomial time complexity issue in cmark-gfm that may lead to unbounded resource exhaustion and subsequent denial of service. This vulnerability has been patched in 0.29.0.gfm.7.

Affected (CNA)

Vendor / productVersions
github / cmark-gfmaffected < 0.29.0.gfm.7

CWE

CWE-400, CWE-407

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.