cmark-gfm is GitHubs fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 are subject to a polynomial time complexity issue in cmark-gfm that may lead to unbounded resource exhaustion and subsequent denial of service. This vulnerability has been patched in 0.29.0.gfm.7.
An algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an attacker, typically using crafted manipulations that ensure that the worst case is being reached.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cmark-gfm | Github | * | 0.29.0.gfm.7 (excluding) |
| Cmark-gfm | Ubuntu | kinetic | * |
| Cmark-gfm | Ubuntu | lunar | * |
| Cmark-gfm | Ubuntu | mantic | * |
| Cmark-gfm | Ubuntu | trusty | * |
| Cmark-gfm | Ubuntu | xenial | * |