RSEC-2023-6
See a problem?- Import Source
- https://github.com/RConsortium/r-advisory-database/blob/main/vulns/commonmark/RSEC-2023-6.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/RSEC-2023-6
- Published
- 2023-10-06T05:00:00.600Z
- Modified
- 2023-10-20T07:27:00.600Z
- Summary
- Denial of Service (DoS) vulnerability
- Details
-
The commonmark package, specifically in its dependency on GitHub Flavored Markdown before version 0.29.0.gfm.1, has a vulnerability related to time complexity. Parsing certain crafted markdown tables can take O(n * n) time, leading to potential Denial of Service attacks. This issue does not affect the upstream cmark project and has been fixed in version 0.29.0.gfm.1.
- References
Affected packages
CRAN / commonmark
Package
- Name
- commonmark