Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions gems/commonmarker/CVE-2024-22051.yml
Original file line number Diff line number Diff line change
Expand Up @@ -2,16 +2,16 @@
gem: commonmarker
cve: 2024-22051
ghsa: fmx4-26r3-wxpf
url: https://github.com/github/cmark-gfm/security/advisories/GHSA-mc3g-88wq-6f4x
url: https://github.com/gjtorikian/commonmarker/security/advisories/GHSA-fmx4-26r3-wxpf
title: Integer overflow in cmark-gfm table parsing extension leads to heap memory
corruption
date: 2022-03-03
description: |

### Impact

CommonMarker uses `cmark-gfm` for rendering
[Github Flavored Markdown](https://github.github.com/gfm/).

An [integer overflow in `cmark-gfm`'s table row parsing](https://github.com/github/cmark-gfm/security/advisories/GHSA-mc3g-88wq-6f4x)
may lead to heap memory corruption when parsing tables who's marker
rows contain more than UINT16_MAX columns. The impact of this heap
Expand Down Expand Up @@ -47,7 +47,7 @@ description: |
If you have any questions or comments about this advisory:

* Open an issue in [CommonMarker](http://github.com/gjtorikian/commonmarker)
cvss_v3: 8.8
cvss_v3: 9.8
patched_versions:
- ">= 0.23.4"
related:
Expand Down
35 changes: 0 additions & 35 deletions gems/commonmarker/GHSA-fmx4-26r3-wxpf.yml

This file was deleted.