`commonmarker`

Ecosystem:
rubygems

Package URL:
pkg:gem/commonmarker

Total PRs:
472 Dependabot PRs

Latest PR:
8 days ago

Unique Repositories:
284 repositories

Unique Repos (30 days):
7 repositories

Security Advisories

Integer overflow in cmark-gfm table parsing extension leads to heap memory corruption

GHSA-fmx4-26r3-wxpf CVE-2024-22051 HIGH published over 4 years ago • updated 20 days ago

### Impact CommonMarker uses `cmark-gfm` for rendering [Github Flavored Markdown](https://github.github.com/gfm/). An [integer overflow in `cmark-...

Unbounded resource exhaustion in cmark-gfm autolink extension may lead to denial of service

GHSA-4qw4-jpp4-8gvp MODERATE published over 3 years ago • updated 19 days ago

### Impact CommonMarker uses `cmark-gfm` for rendering [Github Flavored Markdown](https://github.github.com/gfm/). A polynomial time complexity is...

Several quadratic complexity bugs may lead to denial of service in Commonmarker

GHSA-7vh7-fw88-wj87 MODERATE published almost 3 years ago • updated 20 days ago

## Impact Several quadratic complexity bugs in commonmarker's underlying [`cmark-gfm`](https://github.com/github/cmark-gfm) library may lead to un...

Commonmarker vulnerable to to several quadratic complexity bugs that may lead to denial of service

GHSA-48wp-p9qv-4j64 MODERATE published about 3 years ago • updated 20 days ago

## Impact Several quadratic complexity bugs in commonmarker's underlying [`cmark-gfm`](https://github.com/github/cmark-gfm) library may lead to un...

2.8.1 → 2.8.2 Patch PR

Closed 8 days ago 2 comments

Bump commonmarker from 0.17.13 to 0.23.10

srujanreddyj/srujanreddyj.github.io #18

0.17.13 → 0.23.10 Minor PR

Open 12 days ago 1 comment

Bump commonmarker from 2.8.1 to 2.8.2

jorgegorka/master-of-puppets #20

2.8.1 → 2.8.2 Patch PR

Closed 25 days ago 1 comment

chore(deps): bump commonmarker from 2.8.1 to 2.8.2

hackclub/stardance #74

2.8.1 → 2.8.2 Patch PR

Closed 27 days ago 3 comments

Bump commonmarker from 0.23.10 to 2.8.2

Starkast/wikimum #924

0.23.10 → 2.8.2 Major PR

Open 28 days ago 16 comments

Bump commonmarker from 2.8.1 to 2.8.2

rafrdz/ctrl-alt-me #24

2.8.1 → 2.8.2 Patch PR

Closed 29 days ago 1 comment

Bump commonmarker from 0.17.13 to 0.23.10

alexasiu/alexasiu.github.io #4

0.17.13 → 0.23.10 Minor PR

Closed about 1 month ago 1 comment

Bump commonmarker from 2.7.0 to 2.8.1

sankichi92/rss.sankichi.app #224

2.7.0 → 2.8.1 Minor PR

Open about 2 months ago 1 comment

Bump commonmarker from 0.23.10 to 2.8.1

Starkast/wikimum #915

0.23.10 → 2.8.1 Major PR

Open about 2 months ago 15 comments

Bump commonmarker from 2.7.0 to 2.8.0

maimux2x/michi #269

2.7.0 → 2.8.0 Minor PR

Closed about 2 months ago 1 comment

Bump commonmarker from 2.6.2 to 2.8.0

ecosyste-ms/archives #774

2.6.2 → 2.8.0 Minor PR

Closed about 2 months ago 1 comment

Bump commonmarker from 2.7.0 to 2.8.0

noraj/pass-station #99

2.7.0 → 2.8.0 Minor PR

Closed about 2 months ago 1 comment

Bump commonmarker from 2.7.0 to 2.8.0

cristianbica/small-council #16

2.7.0 → 2.8.0 Minor PR

Closed about 2 months ago 1 comment

Bump commonmarker from 2.7.0 to 2.8.0

noraj/ADAssault #66

2.7.0 → 2.8.0 Minor PR

Closed about 2 months ago 1 comment

Bump commonmarker from 0.23.10 to 2.8.0

Starkast/wikimum #912

0.23.10 → 2.8.0 Major PR

Open about 2 months ago 15 comments

Bump commonmarker from 2.6.3 to 2.8.0

typhoonworks/runebook #27

2.6.3 → 2.8.0 Minor PR

Closed about 2 months ago 1 comment

Bump commonmarker from 1.1.5 to 2.7.0

AlexanderCohen/GDIHUB-Handover #10

1.1.5 → 2.7.0 Major PR

Closed 2 months ago 1 comment

Bump the all group in /site with 35 updates

plule/vox-uristi #340

0.23.9 → 0.23.12 Patch PR

Closed 2 months ago 1 comment

Bump the bundler group across 1 directory with 6 updates

AKJUS/marathon #2

0.17.13 → 0.23.12 Minor PR

Open 3 months ago 1 comment

Bump the bundler group across 1 directory with 6 updates

pboling/view_component #3

0.17.13 → 0.23.12 Minor PR

Closed 3 months ago 1 comment

build(deps): Bump commonmarker from 2.6.3 to 2.7.0

Mattlk13/octobox #845

2.6.3 → 2.7.0 Minor PR

Closed 3 months ago 1 comment

Bump commonmarker from 2.6.1 to 2.7.0

noraj/haiti #236

2.6.1 → 2.7.0 Minor PR

Open 3 months ago 1 comment

chore(deps): bump the ruby-deps group across 1 directory with 10 updates

codebar/planner #2531

2.6.3 → 2.7.0 Minor PR

Closed 3 months ago 1 comment

Bump commonmarker from 2.6.3 to 2.7.0

orcboy34/recipe_on_rails #19

2.6.3 → 2.7.0 Minor PR

Closed 3 months ago 1 comment

chore(deps): bump commonmarker from 2.6.3 to 2.7.0

dilolabs/nosia #273

2.6.3 → 2.7.0 Minor PR

Closed 3 months ago 1 comment

Bump commonmarker from 2.6.2 to 2.7.0

ecosyste-ms/archives #758

2.6.2 → 2.7.0 Minor PR

Closed 3 months ago 1 comment

Bump commonmarker from 2.6.3 to 2.7.0

kettle-rb/ast-merge #19

2.6.3 → 2.7.0 Minor PR

Open 3 months ago 1 comment

Bump commonmarker from 0.23.10 to 2.7.0

Starkast/wikimum #897

0.23.10 → 2.7.0 Major PR

Open 3 months ago 15 comments

Bump commonmarker from 2.6.3 to 2.7.0

typhoonworks/runebook #18

2.6.3 → 2.7.0 Minor PR

Closed 3 months ago 1 comment

Bump the prod-dependencies group across 2 directories with 11 updates

Familyfirst4/dependabot-core #843

2.6.3 → 2.7.0 Minor PR

Closed 3 months ago 1 comment

Bump commonmarker from 0.17.13 to 0.23.10

tobiasduerschmid/tobiasduerschmid.github.io #12

0.17.13 → 0.23.10 Minor PR

Closed 3 months ago 1 comment

Bump commonmarker from 0.17.13 to 0.23.10

novelmartis/novelmartis.github.io #3

0.17.13 → 0.23.10 Minor PR

Closed 3 months ago 1 comment

Bump commonmarker from 0.23.9 to 0.23.10

ptsinganos/ptsinganos.github.io #24

0.23.9 → 0.23.10 Patch PR

Closed 4 months ago 1 comment

Bump the prod-dependencies group across 1 directory with 29 updates

dependabot/dependabot-core #14232

2.3.1 → 2.6.3 Minor PR

Closed 4 months ago 1 comment

Bump the bundler group across 1 directory with 6 updates

pboling/view_component #2

0.17.13 → 0.23.12 Minor PR

Closed 4 months ago 1 comment

Bump the bundler group across 1 directory with 6 updates

kevo-cli/whenigroup.github.io #3

0.17.13 → 0.23.12 Minor PR

Open 4 months ago 1 comment

Bump commonmarker from 2.6.2 to 2.6.3

kettle-rb/ast-merge #9

2.6.2 → 2.6.3 Patch PR

Open 4 months ago 2 comments

Bump commonmarker from 2.6.1 to 2.6.3

nschneble/rails-superstack #29

2.6.1 → 2.6.3 Patch PR

Closed 4 months ago 1 comment

Bump commonmarker from 0.17.13 to 0.23.10

mikorotkov/mikorotkov.github.io #17

0.17.13 → 0.23.10 Minor PR

Closed 5 months ago 2 comments

Bump commonmarker from 2.4.1 to 2.6.2

luizpvas/explicit #103

2.4.1 → 2.6.2 Minor PR

Closed 5 months ago 1 comment

Bump commonmarker from 2.6.0 to 2.6.2

bigmasonwang/directory-kit #12

2.6.0 → 2.6.2 Patch PR

Closed 5 months ago 1 comment

Bump commonmarker from 0.23.10 to 2.6.2

Starkast/wikimum #875

0.23.10 → 2.6.2 Major PR

Open 5 months ago 15 comments

Bump commonmarker from 0.17.13 to 0.23.10

cmlpr/cmlpr.github.io #18

0.17.13 → 0.23.10 Minor PR

Closed 5 months ago 1 comment

Bump commonmarker from 0.23.10 to 2.6.1

Starkast/wikimum #869

0.23.10 → 2.6.1 Major PR

Open 5 months ago 15 comments

Bump commonmarker from 2.4.1 to 2.6.1

luizpvas/explicit #101

2.4.1 → 2.6.1 Minor PR

Closed 5 months ago 1 comment

chore(deps): bump commonmarker from 0.23.10 to 2.6.1

ipfs-shipyard/ecosystem-dashboard #1016

0.23.10 → 2.6.1 Major PR

Closed 5 months ago 1 comment

Bump commonmarker from 2.6.0 to 2.6.1

bigmasonwang/directory-kit #5

2.6.0 → 2.6.1 Patch PR

Closed 5 months ago 1 comment

Bump commonmarker from 2.6.0 to 2.6.1

svcrobotics/blocnotes #5

2.6.0 → 2.6.1 Patch PR

Closed 5 months ago 1 comment

Bump commonmarker from 0.23.4 to 0.23.10

mapuya19/mapuya19.github.io #20

0.23.4 → 0.23.10 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the ruby-deps group with 5 updates

codebar/planner #2414

2.5.0 → 2.6.0 Minor PR

Closed 6 months ago 1 comment

Package Details

Name:	`commonmarker`
Ecosystem:	rubygems
PURL Type:	gem
Package URL:	`pkg:gem/commonmarker`
JSON API:	View JSON

Security Advisories

5

Active advisories

HIGH 1

MODERATE 4

View All gem Advisories

Package Information

Description:

A fast, safe, extensible parser for CommonMark. This wraps the comrak Rust crate.

Repository:	https://github.com/gjtorikian/commonmarker
Homepage:	https://github.com/gjtorikian/commonmarker
Latest Release:	`2.3.0` about 1 year ago
Dependent Repos:	317,893
Dependent Packages:	69
Downloads:	65,056,593
Ranking:	Top 0.0792% by dependent repos Top 0.4633% by downloads Top 0.4432% by dependent pkgs

PR Status

Open 180 (38.1%)

Merged 81 (17.2%)

Closed 197 (41.7%)

PR Types

Major 40 (8.5%)

Minor 210 (44.5%)

Patch 200 (42.4%)

commonmarker

Security Advisories

Integer overflow in cmark-gfm table parsing extension leads to heap memory corruption

Unbounded resource exhaustion in cmark-gfm autolink extension may lead to denial of service

Several quadratic complexity bugs may lead to denial of service in Commonmarker

Commonmarker vulnerable to to several quadratic complexity bugs that may lead to denial of service

Several quadratic complexity bugs may lead to denial of service in Commonmarker

Recent PRs

Package Details

Security Advisories

5

Package Information

PR Status

PR Types

`commonmarker`