← CVE Intelligence

CVE-2023-22486

cmark-gfm Quadratic complexity bug in handle_close_bracket may lead to a denial of service PUBLISHED

Description (CNA)

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 contain a polynomial time complexity issue in handle_close_bracket that may lead to unbounded resource exhaustion and subsequent denial of service. This vulnerability has been patched in 0.29.0.gfm.7.

Affected (CNA)

Vendor / productVersions
github / cmark-gfmaffected < 0.29.0.gfm.7

CWE

CWE-400, CWE-407

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.