Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Jonas Wagner

Researcher fromGoogle
#41606of 53,632
6.5Total CVSS
Vulnerabilities · 1
PT-2020-18334
6.5
2020-07-01
Github · Github Flavored Markdown · CVE-2020-5238
**Name of the Vulnerable Software and Affected Versions** GitHub Flavored Markdown versions prior to 0.29.0.gfm.1 **Description** The issue is related to the time complexity of parsing certain markdown tables, which can take O(n * n) time. An attacker could craft a markdown table to cause a denial of service. This issue does not affect the upstream cmark project. **Recommendations** For versions prior to 0.29.0.gfm.1, update to version 0.29.0.gfm.1 to resolve the issue. As a temporary workaround, consider restricting the use of markdown tables until the update is applied.