Home > Vulnerability Database > WS-2023-0095

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

WS-2023-0095

Date: August 19, 2025

Commonmarker vulnerable to to several quadratic complexity bugs that may lead to denial of service

Language: Ruby

Severity Score

6.5

Related Resources (10)

Url: https://github.com/gjtorikian/commonmarker/commit/42cfc90251353f9fceda91b884d0ded8d3da0bcf

Url: https://github.com/gjtorikian/commonmarker

Url: https://github.com/github/cmark-gfm/releases/tag/0.29.0.gfm.11

Url: https://github.com/github/cmark-gfm/releases/tag/0.29.0.gfm.10

Url: https://github.com/gjtorikian/commonmarker/releases/tag/v0.23.9

Url: https://github.com/gjtorikian/commonmarker/security/advisories/GHSA-48wp-p9qv-4j64

Url: https://github.com/github/cmark-gfm/security/advisories/GHSA-66g8-4hjf-77xh

Url: https://github.com/gjtorikian/commonmarker/pull/236

Url: https://github.com/github/cmark-gfm/security/advisories/GHSA-r8vr-c48j-fcc5

Url: https://www.mend.io/vulnerability-database/WS-2023-0095

Severity Score

6.5

Weakness Type (CWE)

Uncontrolled Resource Consumption

CWE-400

CVSS v3.1

Base Score:	6.5
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	REQUIRED
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	HIGH

Do you need more information?

Contact Us