GitHub Flavored Markdown是美国GitHub公司的一款使用在C语言中的CommonMark解析和渲染库。
GitHub Flavored Markdown 0.29.0.gfm.1之前版本中存在输入验证错误漏洞。该漏洞源于网络系统或产品未对输入的数据进行正确的验证。
目前厂商已发布升级补丁以修复漏洞，补丁获取链接：
https://github.com/github/cmark-gfm/security/advisories/GHSA-7gc6-9qr5-hc85
来源:MISC
链接:https://github.com/github/cmark-gfm/commit/85d895289c5ab67f988ca659493a64abb5fec7b4
来源:CONFIRM
链接:https://github.com/github/cmark-gfm/security/advisories/GHSA-7gc6-9qr5-hc85
来源:FEDORA
链接:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZGJH2A4VAV54X6NSCNNGSEIGIIY5N2VR/
来源:FEDORA
链接:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TCDHBTUFIOYRIS5HAS6PZNBNMB7IOAX3/
来源:FEDORA
链接:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WMQFOQQCWOAMQ4I2XIVCVOXXIJ75HDCW/
来源:nvd.nist.gov
链接:https://nvd.nist.gov/vuln/detail/CVE-2020-5238
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.1678
来源:www.nsfocus.net
链接:http://www.nsfocus.net/vulndb/47054
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/162677/Red-Hat-Security-Advisory-2021-1972-01.html
来源:vigilance.fr
链接:https://vigilance.fr/vulnerability/GitHub-Flavored-Markdown-overload-via-Input-Parsing-33494
