Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-vapm-4zu8-d7ba
Summarycmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. In versions prior 0.29.0.gfm.7, a crafted markdown document can trigger an out-of-bounds read in the `validate_protocol` function. We believe this bug is harmless in practice, because the out-of-bounds read accesses `malloc` metadata without causing any visible damage.This vulnerability has been patched in 0.29.0.gfm.7.
Aliases
0
alias CVE-2023-22485
Fixed_packages
0
url pkg:deb/debian/cmark-gfm@0.29.0.gfm.13-1?distro=trixie
purl pkg:deb/debian/cmark-gfm@0.29.0.gfm.13-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cmark-gfm@0.29.0.gfm.13-1%3Fdistro=trixie
1
url pkg:deb/debian/cmark-gfm@0.29.0.gfm.13-4
purl pkg:deb/debian/cmark-gfm@0.29.0.gfm.13-4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cmark-gfm@0.29.0.gfm.13-4
2
url pkg:deb/debian/cmark-gfm@0.29.0.gfm.13-4?distro=trixie
purl pkg:deb/debian/cmark-gfm@0.29.0.gfm.13-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cmark-gfm@0.29.0.gfm.13-4%3Fdistro=trixie
3
url pkg:deb/debian/cmark-gfm@0.29.0.gfm.13-7.1?distro=trixie
purl pkg:deb/debian/cmark-gfm@0.29.0.gfm.13-7.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cmark-gfm@0.29.0.gfm.13-7.1%3Fdistro=trixie
4
url pkg:deb/debian/python-cmarkgfm@2024.11.20-1
purl pkg:deb/debian/python-cmarkgfm@2024.11.20-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-cmarkgfm@2024.11.20-1
5
url pkg:deb/debian/python-cmarkgfm@2024.11.20-1?distro=trixie
purl pkg:deb/debian/python-cmarkgfm@2024.11.20-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-cmarkgfm@2024.11.20-1%3Fdistro=trixie
6
url pkg:deb/debian/python-cmarkgfm@2025.10.22-2?distro=trixie
purl pkg:deb/debian/python-cmarkgfm@2025.10.22-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-cmarkgfm@2025.10.22-2%3Fdistro=trixie
7
url pkg:deb/debian/r-cran-commonmark@1.9.0-1?distro=trixie
purl pkg:deb/debian/r-cran-commonmark@1.9.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/r-cran-commonmark@1.9.0-1%3Fdistro=trixie
8
url pkg:deb/debian/r-cran-commonmark@1.9.5-1
purl pkg:deb/debian/r-cran-commonmark@1.9.5-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/r-cran-commonmark@1.9.5-1
9
url pkg:deb/debian/r-cran-commonmark@1.9.5-1?distro=trixie
purl pkg:deb/debian/r-cran-commonmark@1.9.5-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/r-cran-commonmark@1.9.5-1%3Fdistro=trixie
10
url pkg:deb/debian/r-cran-commonmark@2.0.0-2?distro=trixie
purl pkg:deb/debian/r-cran-commonmark@2.0.0-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/r-cran-commonmark@2.0.0-2%3Fdistro=trixie
11
url pkg:deb/debian/ruby-commonmarker@0.23.10-1
purl pkg:deb/debian/ruby-commonmarker@0.23.10-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-commonmarker@0.23.10-1
12
url pkg:deb/debian/ruby-commonmarker@0.23.10-1?distro=trixie
purl pkg:deb/debian/ruby-commonmarker@0.23.10-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-commonmarker@0.23.10-1%3Fdistro=trixie
Affected_packages
0
url pkg:deb/debian/cmark-gfm@0.29.0.gfm.0-6
purl pkg:deb/debian/cmark-gfm@0.29.0.gfm.0-6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2an8-zxae-hffk
1
vulnerability VCID-3hpr-vga4-kucr
2
vulnerability VCID-3ngu-1qyq-5ub2
3
vulnerability VCID-cr2f-h3ds-m7bp
4
vulnerability VCID-fjt6-mbum-gkdh
5
vulnerability VCID-g272-pad7-t7bp
6
vulnerability VCID-rfcv-sua7-uke4
7
vulnerability VCID-t4pg-p9b1-xycx
8
vulnerability VCID-u5p8-6fkp-byap
9
vulnerability VCID-vapm-4zu8-d7ba
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cmark-gfm@0.29.0.gfm.0-6
1
url pkg:deb/debian/cmark-gfm@0.29.0.gfm.0-6?distro=trixie
purl pkg:deb/debian/cmark-gfm@0.29.0.gfm.0-6?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2an8-zxae-hffk
1
vulnerability VCID-3hpr-vga4-kucr
2
vulnerability VCID-3ngu-1qyq-5ub2
3
vulnerability VCID-cr2f-h3ds-m7bp
4
vulnerability VCID-fjt6-mbum-gkdh
5
vulnerability VCID-g272-pad7-t7bp
6
vulnerability VCID-rfcv-sua7-uke4
7
vulnerability VCID-t4pg-p9b1-xycx
8
vulnerability VCID-u5p8-6fkp-byap
9
vulnerability VCID-vapm-4zu8-d7ba
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cmark-gfm@0.29.0.gfm.0-6%3Fdistro=trixie
2
url pkg:deb/debian/cmark-gfm@0.29.0.gfm.6-6
purl pkg:deb/debian/cmark-gfm@0.29.0.gfm.6-6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2an8-zxae-hffk
1
vulnerability VCID-3hpr-vga4-kucr
2
vulnerability VCID-cr2f-h3ds-m7bp
3
vulnerability VCID-g272-pad7-t7bp
4
vulnerability VCID-rfcv-sua7-uke4
5
vulnerability VCID-u5p8-6fkp-byap
6
vulnerability VCID-vapm-4zu8-d7ba
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cmark-gfm@0.29.0.gfm.6-6
3
url pkg:deb/debian/cmark-gfm@0.29.0.gfm.6-6?distro=trixie
purl pkg:deb/debian/cmark-gfm@0.29.0.gfm.6-6?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2an8-zxae-hffk
1
vulnerability VCID-3hpr-vga4-kucr
2
vulnerability VCID-cr2f-h3ds-m7bp
3
vulnerability VCID-g272-pad7-t7bp
4
vulnerability VCID-rfcv-sua7-uke4
5
vulnerability VCID-u5p8-6fkp-byap
6
vulnerability VCID-vapm-4zu8-d7ba
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cmark-gfm@0.29.0.gfm.6-6%3Fdistro=trixie
4
url pkg:deb/debian/python-cmarkgfm@0.4.2-1
purl pkg:deb/debian/python-cmarkgfm@0.4.2-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2an8-zxae-hffk
1
vulnerability VCID-3hpr-vga4-kucr
2
vulnerability VCID-3ngu-1qyq-5ub2
3
vulnerability VCID-cr2f-h3ds-m7bp
4
vulnerability VCID-fjt6-mbum-gkdh
5
vulnerability VCID-g272-pad7-t7bp
6
vulnerability VCID-rfcv-sua7-uke4
7
vulnerability VCID-t4pg-p9b1-xycx
8
vulnerability VCID-u5p8-6fkp-byap
9
vulnerability VCID-vapm-4zu8-d7ba
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-cmarkgfm@0.4.2-1
5
url pkg:deb/debian/python-cmarkgfm@0.4.2-1?distro=trixie
purl pkg:deb/debian/python-cmarkgfm@0.4.2-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2an8-zxae-hffk
1
vulnerability VCID-3hpr-vga4-kucr
2
vulnerability VCID-3ngu-1qyq-5ub2
3
vulnerability VCID-cr2f-h3ds-m7bp
4
vulnerability VCID-fjt6-mbum-gkdh
5
vulnerability VCID-g272-pad7-t7bp
6
vulnerability VCID-rfcv-sua7-uke4
7
vulnerability VCID-t4pg-p9b1-xycx
8
vulnerability VCID-u5p8-6fkp-byap
9
vulnerability VCID-vapm-4zu8-d7ba
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-cmarkgfm@0.4.2-1%3Fdistro=trixie
6
url pkg:deb/debian/python-cmarkgfm@0.8.0-3
purl pkg:deb/debian/python-cmarkgfm@0.8.0-3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2an8-zxae-hffk
1
vulnerability VCID-3hpr-vga4-kucr
2
vulnerability VCID-cr2f-h3ds-m7bp
3
vulnerability VCID-fjt6-mbum-gkdh
4
vulnerability VCID-g272-pad7-t7bp
5
vulnerability VCID-rfcv-sua7-uke4
6
vulnerability VCID-u5p8-6fkp-byap
7
vulnerability VCID-vapm-4zu8-d7ba
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-cmarkgfm@0.8.0-3
7
url pkg:deb/debian/python-cmarkgfm@0.8.0-3?distro=trixie
purl pkg:deb/debian/python-cmarkgfm@0.8.0-3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2an8-zxae-hffk
1
vulnerability VCID-3hpr-vga4-kucr
2
vulnerability VCID-cr2f-h3ds-m7bp
3
vulnerability VCID-fjt6-mbum-gkdh
4
vulnerability VCID-g272-pad7-t7bp
5
vulnerability VCID-rfcv-sua7-uke4
6
vulnerability VCID-u5p8-6fkp-byap
7
vulnerability VCID-vapm-4zu8-d7ba
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-cmarkgfm@0.8.0-3%3Fdistro=trixie
8
url pkg:deb/debian/r-cran-commonmark@1.7-2
purl pkg:deb/debian/r-cran-commonmark@1.7-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2an8-zxae-hffk
1
vulnerability VCID-3hpr-vga4-kucr
2
vulnerability VCID-3ngu-1qyq-5ub2
3
vulnerability VCID-cr2f-h3ds-m7bp
4
vulnerability VCID-fjt6-mbum-gkdh
5
vulnerability VCID-g272-pad7-t7bp
6
vulnerability VCID-rfcv-sua7-uke4
7
vulnerability VCID-t4pg-p9b1-xycx
8
vulnerability VCID-u5p8-6fkp-byap
9
vulnerability VCID-vapm-4zu8-d7ba
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/r-cran-commonmark@1.7-2
9
url pkg:deb/debian/r-cran-commonmark@1.7-2?distro=trixie
purl pkg:deb/debian/r-cran-commonmark@1.7-2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2an8-zxae-hffk
1
vulnerability VCID-3hpr-vga4-kucr
2
vulnerability VCID-3ngu-1qyq-5ub2
3
vulnerability VCID-cr2f-h3ds-m7bp
4
vulnerability VCID-fjt6-mbum-gkdh
5
vulnerability VCID-g272-pad7-t7bp
6
vulnerability VCID-rfcv-sua7-uke4
7
vulnerability VCID-t4pg-p9b1-xycx
8
vulnerability VCID-u5p8-6fkp-byap
9
vulnerability VCID-vapm-4zu8-d7ba
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/r-cran-commonmark@1.7-2%3Fdistro=trixie
10
url pkg:deb/debian/r-cran-commonmark@1.8.1-1
purl pkg:deb/debian/r-cran-commonmark@1.8.1-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2an8-zxae-hffk
1
vulnerability VCID-3hpr-vga4-kucr
2
vulnerability VCID-cr2f-h3ds-m7bp
3
vulnerability VCID-g272-pad7-t7bp
4
vulnerability VCID-rfcv-sua7-uke4
5
vulnerability VCID-u5p8-6fkp-byap
6
vulnerability VCID-vapm-4zu8-d7ba
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/r-cran-commonmark@1.8.1-1
11
url pkg:deb/debian/r-cran-commonmark@1.8.1-1?distro=trixie
purl pkg:deb/debian/r-cran-commonmark@1.8.1-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2an8-zxae-hffk
1
vulnerability VCID-3hpr-vga4-kucr
2
vulnerability VCID-cr2f-h3ds-m7bp
3
vulnerability VCID-g272-pad7-t7bp
4
vulnerability VCID-rfcv-sua7-uke4
5
vulnerability VCID-u5p8-6fkp-byap
6
vulnerability VCID-vapm-4zu8-d7ba
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/r-cran-commonmark@1.8.1-1%3Fdistro=trixie
12
url pkg:deb/debian/ruby-commonmarker@0.21.0-1
purl pkg:deb/debian/ruby-commonmarker@0.21.0-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2an8-zxae-hffk
1
vulnerability VCID-3hpr-vga4-kucr
2
vulnerability VCID-3ngu-1qyq-5ub2
3
vulnerability VCID-cr2f-h3ds-m7bp
4
vulnerability VCID-fjt6-mbum-gkdh
5
vulnerability VCID-g272-pad7-t7bp
6
vulnerability VCID-q8rv-ktdr-q7ep
7
vulnerability VCID-rfcv-sua7-uke4
8
vulnerability VCID-u5p8-6fkp-byap
9
vulnerability VCID-vapm-4zu8-d7ba
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-commonmarker@0.21.0-1
13
url pkg:deb/debian/ruby-commonmarker@0.21.0-1?distro=trixie
purl pkg:deb/debian/ruby-commonmarker@0.21.0-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2an8-zxae-hffk
1
vulnerability VCID-3hpr-vga4-kucr
2
vulnerability VCID-3ngu-1qyq-5ub2
3
vulnerability VCID-cr2f-h3ds-m7bp
4
vulnerability VCID-fjt6-mbum-gkdh
5
vulnerability VCID-g272-pad7-t7bp
6
vulnerability VCID-q8rv-ktdr-q7ep
7
vulnerability VCID-rfcv-sua7-uke4
8
vulnerability VCID-u5p8-6fkp-byap
9
vulnerability VCID-vapm-4zu8-d7ba
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-commonmarker@0.21.0-1%3Fdistro=trixie
14
url pkg:deb/debian/ruby-commonmarker@0.23.6-1
purl pkg:deb/debian/ruby-commonmarker@0.23.6-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2an8-zxae-hffk
1
vulnerability VCID-3hpr-vga4-kucr
2
vulnerability VCID-cr2f-h3ds-m7bp
3
vulnerability VCID-fjt6-mbum-gkdh
4
vulnerability VCID-g272-pad7-t7bp
5
vulnerability VCID-rfcv-sua7-uke4
6
vulnerability VCID-u5p8-6fkp-byap
7
vulnerability VCID-vapm-4zu8-d7ba
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-commonmarker@0.23.6-1
15
url pkg:deb/debian/ruby-commonmarker@0.23.6-1?distro=trixie
purl pkg:deb/debian/ruby-commonmarker@0.23.6-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2an8-zxae-hffk
1
vulnerability VCID-3hpr-vga4-kucr
2
vulnerability VCID-cr2f-h3ds-m7bp
3
vulnerability VCID-fjt6-mbum-gkdh
4
vulnerability VCID-g272-pad7-t7bp
5
vulnerability VCID-rfcv-sua7-uke4
6
vulnerability VCID-u5p8-6fkp-byap
7
vulnerability VCID-vapm-4zu8-d7ba
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-commonmarker@0.23.6-1%3Fdistro=trixie
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-22485
reference_id
reference_type
scores
0
value 0.00071
scoring_system epss
scoring_elements 0.21822
published_at 2026-05-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-22485
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22485
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22485
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1033110
reference_id 1033110
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1033110
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1033111
reference_id 1033111
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1033111
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1033112
reference_id 1033112
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1033112
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1033113
reference_id 1033113
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1033113
6
reference_url https://github.com/github/cmark-gfm/security/advisories/GHSA-c944-cv5f-hpvr
reference_id GHSA-c944-cv5f-hpvr
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-10T21:02:09Z/
url https://github.com/github/cmark-gfm/security/advisories/GHSA-c944-cv5f-hpvr
Weaknesses
0
cwe_id 125
name Out-of-bounds Read
description The product reads data past the end, or before the beginning, of the intended buffer.
Exploits
Severity_range_score5.3 - 5.3
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-vapm-4zu8-d7ba