debian/ghostwriter vulnerabilities

Latest debian/ghostwriter CVEs

Newest publication first

1. CVE-2022-39209 Uncontrolled Resource Consumption in cmark-gfm

   Published 2022-09-15

   Medium·CVSS 6.5 EPSS 2.3%

   cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. In versions prior to 0.29.0.gfm.6 a polynomial time complexity issue in cmark-gfm's autolink extension may lead to unbounded resource exhaustion and subsequent denial of service. Use...

2. CVE-2022-24724 Integer overflow in table parsing extension leads to heap memory corruption

   Published 2022-03-03

   Critical·CVSS 9.8 EPSS 4.5%

   cmark-gfm is GitHub's extended version of the C reference implementation of CommonMark. Prior to versions 0.29.0.gfm.3 and 0.28.3.gfm.21, an integer overflow in cmark-gfm's table row parsing table.c:row_from_string may lead to heap memory corruption when parsing tables who's mark...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.