Known vulnerabilities in cmark-gfm

Vendor: GitHub
Software: cmark-gfm
Software CPE: cpe:2.3:a:github:cmark-gfm:*:*:*:*:*:*:*:*
Website: https://github.com/github
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting cmark-gfm cmark-gfm is affected by 8 known vulnerabilities: 1 high, 7 medium Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU74298 - Inefficient Algorithmic Complexity
CVE-2023-26485		 CWE-407 Medium
No
No
 0.29.0.gfm.10 03.04.2023 SB2023040325
SB2025030401
#VU74297 - Inefficient Algorithmic Complexity
CVE-2023-24824		 CWE-407 Medium
No
No
 0.29.0.gfm.10 03.04.2023 SB2023040325
#VU71462 - Out-of-bounds read
CVE-2023-22485		 CWE-125 Medium
No
No
 0.29.0.gfm.7 24.01.2023 SB2023012405
#VU71461 - Inefficient Algorithmic Complexity
CVE-2023-22483		 CWE-407 Medium
No
No
 0.29.0.gfm.7 24.01.2023 SB2023012405
SB2025030401
#VU71460 - Inefficient Algorithmic Complexity
CVE-2023-22484		 CWE-407 Medium
No
No
 0.29.0.gfm.7 24.01.2023 SB2023012405
SB2023012406
SB2025030401
#VU71459 - Inefficient Algorithmic Complexity
CVE-2023-22486		 CWE-407 Medium
No
No
 0.29.0.gfm.7 24.01.2023 SB2023012405
SB2023012406
SB2025030401
#VU67493 - Resource exhaustion
CVE-2022-39209		 CWE-400 Medium
No
No
 0.29.0.gfm.6 20.09.2022 SB2022092023
SB20230818163
SB2022102754
and 3 more
#VU65401 - Integer overflow
CVE-2022-24724		 CWE-190 High
No
No
 0.28.3.gfm.21, 0.29.0.gfm.3 18.07.2022 SB2022071828
SB2022071829
SB2022031316
and 5 more