Security vulnerability affects the cmark package. cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C.
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-CU29214.json"