Medium severity5.3NVD Advisory· Published Mar 31, 2023· Updated Jun 17, 2026
CVE-2023-24824
CVE-2023-24824
Description
cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. A polynomial time complexity issue in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service. This CVE covers quadratic complexity issues when parsing text which leads with either large numbers of > or - characters. This issue has been addressed in version 0.29.0.gfm.10. Users are advised to upgrade. Users unable to upgrade should validate that their input comes from trusted sources.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- osv-coords3 versions
>= 0.1.0, < 0.2.6+ 2 more
- (no CPE)range: >= 0.1.0, < 0.2.6
- (no CPE)range: < 2.0.6-7.el8_10
- (no CPE)range: < 2.0.6-7.el8_10
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.