Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/golang-github-gomarkdown-markdown@0.0~git20220731.dcdaee8-2?distro=trixie
Typedeb
Namespacedebian
Namegolang-github-gomarkdown-markdown
Version0.0~git20220731.dcdaee8-2
Qualifiers
distro trixie
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version0.0~git20231115.a660076-1
Latest_non_vulnerable_version0.0~git20231115.a660076-1
Affected_by_vulnerabilities
0
url VCID-srd8-zdvt-bueg
vulnerability_id VCID-srd8-zdvt-bueg
summary The package `github.com/gomarkdown/markdown` is a Go library for parsing Markdown text and rendering as HTML. Prior to pseudoversion `0.0.0-20230922105210-14b16010c2ee`, which corresponds with commit `14b16010c2ee7ff33a940a541d993bd043a88940`, parsing malformed markdown input with parser that uses parser.Mmark extension could result in out-of-bounds read vulnerability. To exploit the vulnerability, parser needs to have `parser.Mmark` extension set. The panic occurs inside the `citation.go` file on the line 69 when the parser tries to access the element past its length. This can result in a denial of service. Commit `14b16010c2ee7ff33a940a541d993bd043a88940`/pseudoversion `0.0.0-20230922105210-14b16010c2ee` contains a patch for this issue.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-42821
reference_id
reference_type
scores
0
value 0.00483
scoring_system epss
scoring_elements 0.65628
published_at 2026-06-11T12:55:00Z
1
value 0.00483
scoring_system epss
scoring_elements 0.65726
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-42821
1
reference_url https://github.com/gomarkdown/markdown
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/gomarkdown/markdown
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-42821
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-42821
3
reference_url https://github.com/gomarkdown/markdown/commit/14b16010c2ee7ff33a940a541d993bd043a88940
reference_id 14b16010c2ee7ff33a940a541d993bd043a88940
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-24T19:26:08Z/
url https://github.com/gomarkdown/markdown/commit/14b16010c2ee7ff33a940a541d993bd043a88940
4
reference_url https://github.com/gomarkdown/markdown/blob/7478c230c7cd3e7328803d89abe591d0b61c41e4/parser/citation.go#L69
reference_id citation.go#L69
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-24T19:26:08Z/
url https://github.com/gomarkdown/markdown/blob/7478c230c7cd3e7328803d89abe591d0b61c41e4/parser/citation.go#L69
5
reference_url https://github.com/gomarkdown/markdown/security/advisories/GHSA-m9xq-6h2j-65r2
reference_id GHSA-m9xq-6h2j-65r2
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-24T19:26:08Z/
url https://github.com/gomarkdown/markdown/security/advisories/GHSA-m9xq-6h2j-65r2
fixed_packages
0
url pkg:deb/debian/golang-github-gomarkdown-markdown@0.0~git20231115.a660076-1?distro=trixie
purl pkg:deb/debian/golang-github-gomarkdown-markdown@0.0~git20231115.a660076-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-github-gomarkdown-markdown@0.0~git20231115.a660076-1%3Fdistro=trixie
aliases CVE-2023-42821, GHSA-m9xq-6h2j-65r2
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-srd8-zdvt-bueg
Fixing_vulnerabilities
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-github-gomarkdown-markdown@0.0~git20220731.dcdaee8-2%3Fdistro=trixie