`commonmarker`

Ecosystem:
rubygems

Package URL:
pkg:gem/commonmarker

Total PRs:
472 Dependabot PRs

Latest PR:
8 days ago

Unique Repositories:
284 repositories

Unique Repos (30 days):
7 repositories

Security Advisories

Integer overflow in cmark-gfm table parsing extension leads to heap memory corruption

GHSA-fmx4-26r3-wxpf CVE-2024-22051 HIGH published over 4 years ago • updated 20 days ago

### Impact CommonMarker uses `cmark-gfm` for rendering [Github Flavored Markdown](https://github.github.com/gfm/). An [integer overflow in `cmark-...

Unbounded resource exhaustion in cmark-gfm autolink extension may lead to denial of service

GHSA-4qw4-jpp4-8gvp MODERATE published over 3 years ago • updated 20 days ago

### Impact CommonMarker uses `cmark-gfm` for rendering [Github Flavored Markdown](https://github.github.com/gfm/). A polynomial time complexity is...

Several quadratic complexity bugs may lead to denial of service in Commonmarker

GHSA-7vh7-fw88-wj87 MODERATE published almost 3 years ago • updated 20 days ago

## Impact Several quadratic complexity bugs in commonmarker's underlying [`cmark-gfm`](https://github.com/github/cmark-gfm) library may lead to un...

Commonmarker vulnerable to to several quadratic complexity bugs that may lead to denial of service

GHSA-48wp-p9qv-4j64 MODERATE published about 3 years ago • updated 20 days ago

## Impact Several quadratic complexity bugs in commonmarker's underlying [`cmark-gfm`](https://github.com/github/cmark-gfm) library may lead to un...

2.8.1 → 2.8.2 Patch PR

Closed 8 days ago 2 comments

Bump commonmarker from 2.8.1 to 2.8.2

jorgegorka/master-of-puppets #20

2.8.1 → 2.8.2 Patch PR

Closed 25 days ago 1 comment

chore(deps): bump commonmarker from 2.8.1 to 2.8.2

hackclub/stardance #74

2.8.1 → 2.8.2 Patch PR

Closed 27 days ago 3 comments

Bump commonmarker from 2.8.1 to 2.8.2

rafrdz/ctrl-alt-me #24

2.8.1 → 2.8.2 Patch PR

Closed 29 days ago 1 comment

Bump the all group in /site with 35 updates

plule/vox-uristi #340

0.23.9 → 0.23.12 Patch PR

Closed 2 months ago 1 comment

Bump commonmarker from 0.23.9 to 0.23.10

ptsinganos/ptsinganos.github.io #24

0.23.9 → 0.23.10 Patch PR

Closed 4 months ago 1 comment

Bump commonmarker from 2.6.2 to 2.6.3

kettle-rb/ast-merge #9

2.6.2 → 2.6.3 Patch PR

Open 4 months ago 2 comments

Bump commonmarker from 2.6.1 to 2.6.3

nschneble/rails-superstack #29

2.6.1 → 2.6.3 Patch PR

Closed 4 months ago 1 comment

Bump commonmarker from 2.6.0 to 2.6.2

bigmasonwang/directory-kit #12

2.6.0 → 2.6.2 Patch PR

Closed 5 months ago 1 comment

Bump commonmarker from 2.6.0 to 2.6.1

bigmasonwang/directory-kit #5

2.6.0 → 2.6.1 Patch PR

Closed 5 months ago 1 comment

Bump commonmarker from 2.6.0 to 2.6.1

svcrobotics/blocnotes #5

2.6.0 → 2.6.1 Patch PR

Closed 5 months ago 1 comment

Bump commonmarker from 0.23.4 to 0.23.10

mapuya19/mapuya19.github.io #20

0.23.4 → 0.23.10 Patch PR

Closed 5 months ago 1 comment

Bump commonmarker from 0.23.9 to 0.23.10

matthewfallshaw/matthewfallshaw.github.io #24

0.23.9 → 0.23.10 Patch PR

Closed 7 months ago 2 comments

Bump commonmarker from 0.23.6 to 0.23.7

mleziva/mleziva.github.io #18

0.23.6 → 0.23.7 Patch PR

Closed 8 months ago 1 comment

Bump commonmarker from 2.4.0 to 2.4.1

dilolabs/nosia #159

2.4.0 → 2.4.1 Patch PR

Closed 8 months ago

Bump commonmarker from 2.4.0 to 2.4.1

mgrsskls/hifilog #306

2.4.0 → 2.4.1 Patch PR

Open 8 months ago

Bump the bundler group across 1 directory with 5 updates

Mamonaminyar/devcontainers.github.io #2

0.23.9 → 0.23.10 Patch PR

Open 8 months ago

Bump commonmarker from 2.4.0 to 2.4.1

opf/openproject #20486

2.4.0 → 2.4.1 Patch PR

Merged 8 months ago

build(deps): Bump commonmarker from 2.4.0 to 2.4.1

Mattlk13/octobox #585

2.4.0 → 2.4.1 Patch PR

Closed 8 months ago 1 comment

chore(deps): bump commonmarker from 2.4.0 to 2.4.1

krayinc/pivotal_tracker_viewer #7

2.4.0 → 2.4.1 Patch PR

Open 8 months ago

Bump commonmarker from 2.4.0 to 2.4.1

ecosyste-ms/ost #721

2.4.0 → 2.4.1 Patch PR

Closed 8 months ago 1 comment

build(deps): Bump commonmarker from 2.4.0 to 2.4.1

octobox/octobox #4234

2.4.0 → 2.4.1 Patch PR

Open 8 months ago

Bump commonmarker from 2.4.0 to 2.4.1

ecosyste-ms/dotfiles #72

2.4.0 → 2.4.1 Patch PR

Open 8 months ago 1 comment

Bump commonmarker from 2.4.0 to 2.4.1

ecosyste-ms/advisories #828

2.4.0 → 2.4.1 Patch PR

Closed 8 months ago 1 comment

Bump commonmarker from 2.4.0 to 2.4.1

maimux2x/michi #151

2.4.0 → 2.4.1 Patch PR

Open 8 months ago

Bump commonmarker from 2.4.0 to 2.4.1

t27duck/t27ducksite #651

2.4.0 → 2.4.1 Patch PR

Open 8 months ago

Bump commonmarker from 2.4.0 to 2.4.1

tvonwolfe/blog #10

2.4.0 → 2.4.1 Patch PR

Open 8 months ago

Bump commonmarker from 2.4.0 to 2.4.1

ecosyste-ms/dependabot #60

2.4.0 → 2.4.1 Patch PR

Open 8 months ago

Bump commonmarker from 2.4.0 to 2.4.1

ecosyste-ms/repos #932

2.4.0 → 2.4.1 Patch PR

Closed 8 months ago 1 comment

Bump commonmarker from 2.4.0 to 2.4.1

ecosyste-ms/archives #624

2.4.0 → 2.4.1 Patch PR

Open 8 months ago

Bump commonmarker from 2.4.0 to 2.4.1

maimux2x/ember-blog #92

2.4.0 → 2.4.1 Patch PR

Merged 8 months ago

Bump commonmarker from 2.4.0 to 2.4.1

24pullrequests/24pullrequests #4712

2.4.0 → 2.4.1 Patch PR

Open 8 months ago

Bump commonmarker from 0.23.11 to 0.23.12

bmwilly/bmwilly.github.io #46

0.23.11 → 0.23.12 Patch PR

Open 9 months ago 1 comment

build(deps-dev): bump commonmarker from 0.23.11 to 0.23.12

noraj/php-serialized-formatter #18

0.23.11 → 0.23.12 Patch PR

Merged 9 months ago

Bump commonmarker from 0.23.11 to 0.23.12

athackst/vscode_website_workspace #164

0.23.11 → 0.23.12 Patch PR

Merged 9 months ago

build(deps-dev): bump commonmarker from 0.23.11 to 0.23.12

home-assistant/home-assistant.io #40909

0.23.11 → 0.23.12 Patch PR

Open 9 months ago

Bump commonmarker from 0.23.11 to 0.23.12

lepszyweb/wcag-testy #496

0.23.11 → 0.23.12 Patch PR

Open 9 months ago

Bump commonmarker from 0.23.8 to 0.23.10

JrM2628/JrM2628.github.io #6

0.23.8 → 0.23.10 Patch PR

Merged 9 months ago

Bump the prod-dependencies group across 1 directory with 18 updates

Safe-app-eth/dependabot-core #72

2.3.1 → 2.3.2 Patch PR

Closed 9 months ago 1 comment

Bump the prod-dependencies group across 1 directory with 21 updates

roseteromeo56/dependabot-core #154

2.3.1 → 2.3.2 Patch PR

Open 9 months ago 1 comment

Bump commonmarker from 0.23.4 to 0.23.10

Harry-Chen/personal-blog #16

0.23.4 → 0.23.10 Patch PR

Closed 9 months ago 2 comments

Bump the prod-dependencies group across 1 directory with 29 updates

yeikel/dependabot-core #103

2.3.1 → 2.3.2 Patch PR

Closed 9 months ago 1 comment

Bump the prod-dependencies group across 1 directory with 26 updates

yeikel/dependabot-core #101

2.3.1 → 2.3.2 Patch PR

Closed 10 months ago 1 comment

Bump the bundler group across 1 directory with 5 updates

mrinmaydhar/lancachenet.github.io #1

0.23.9 → 0.23.10 Patch PR

Open 10 months ago

Bump commonmarker from 2.3.1 to 2.3.2

wikinoapp/wikino #870

2.3.1 → 2.3.2 Patch PR

Open 10 months ago

Bump commonmarker from 2.0.1 to 2.0.2

jkevinbaluyot/rails-simple_blog #4

2.0.1 → 2.0.2 Patch PR

Open 10 months ago

Bump commonmarker from 0.23.7 to 0.23.10 in the bundler group across 1 directory

arieluy/arieluy.github.io #3

0.23.7 → 0.23.10 Patch PR

Closed 10 months ago 1 comment

Bump commonmarker from 0.23.6 to 0.23.10 in /docs

brobeson/vscode-lizard #19

0.23.6 → 0.23.10 Patch PR

Open 10 months ago

build(deps): bump commonmarker from 2.3.1 to 2.3.2

sankichi92/LiveLog #2943

2.3.1 → 2.3.2 Patch PR

Open 10 months ago

Bump the prod-dependencies group across 1 directory with 16 updates

Safe-app-eth/dependabot-core #49

2.3.1 → 2.3.2 Patch PR

Open 10 months ago

Package Details

Name:	`commonmarker`
Ecosystem:	rubygems
PURL Type:	gem
Package URL:	`pkg:gem/commonmarker`
JSON API:	View JSON

Security Advisories

5

Active advisories

HIGH 1

MODERATE 4

View All gem Advisories

Package Information

Description:

A fast, safe, extensible parser for CommonMark. This wraps the comrak Rust crate.

Repository:	https://github.com/gjtorikian/commonmarker
Homepage:	https://github.com/gjtorikian/commonmarker
Latest Release:	`2.3.0` about 1 year ago
Dependent Repos:	317,893
Dependent Packages:	69
Downloads:	65,056,593
Ranking:	Top 0.0792% by dependent repos Top 0.4633% by downloads Top 0.4432% by dependent pkgs

PR Status

Open 180 (38.1%)

Merged 81 (17.2%)

Closed 197 (41.7%)

PR Types

Major 40 (8.5%)

Minor 210 (44.5%)

Patch 200 (42.4%)

commonmarker

Security Advisories

Integer overflow in cmark-gfm table parsing extension leads to heap memory corruption

Unbounded resource exhaustion in cmark-gfm autolink extension may lead to denial of service

Several quadratic complexity bugs may lead to denial of service in Commonmarker

Commonmarker vulnerable to to several quadratic complexity bugs that may lead to denial of service

Several quadratic complexity bugs may lead to denial of service in Commonmarker

Recent PRs (filtered by: Patch PRs )

Package Details

Security Advisories

5

Package Information

PR Status

PR Types

`commonmarker`