cve/2023/CVE-2023-37463.md
2024-06-18 02:51:15 +02:00

914 B

CVE-2023-37463

Description

cmark-gfm is an extended version of the C reference implementation of CommonMark, a rationalized version of Markdown syntax with a spec. Three polynomial time complexity issues in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service. These vulnerabilities have been patched in 0.29.0.gfm.12.

POC

Reference

Github