https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T09:36:47.716038+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:1972 ALSA-2021:1972 — Moderate: pandoc security update 2026-10-05T09:36:47.802205+00:00

Affected: AlmaLinux:8: pandoc, AlmaLinux:8: pandoc-common

Pandoc is a Haskell library for converting from one markup format to another, and a command-line tool that uses this library.

Security Fix(es):

* cmark-gfm: Exponential time to parse certain inputs could lead to DoS (CVE-2020-5238)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/cnvd-2021-20205 cnvd-2021-20205 2026-10-05T09:36:47.802270+00:00 cnvd-2021-20205 https://cve.radiocsirt.org/vuln/euvd-2026-36470 EUVD-2026-36470 2026-10-05T09:36:47.802288+00:00 EUVD-2026-36470 https://cve.radiocsirt.org/vuln/fkie_cve-2020-5238 fkie_cve-2020-5238 2026-10-05T09:36:47.802302+00:00

The table extension in GitHub Flavored Markdown before version 0.29.0.gfm.1 takes O(n * n) time to parse certain inputs. An attacker could craft a markdown table which would take an unreasonably long time to process, causing a denial of service. This issue does not affect the upstream cmark project. The issue has been fixed in version 0.29.0.gfm.1.

 https://cve.radiocsirt.org/vuln/gsd-2020-5238 gsd-2020-5238 2026-10-05T09:36:47.802325+00:00 gsd-2020-5238 https://cve.radiocsirt.org/vuln/rhsa-2021:1972 RHSA-2021:1972 — Red Hat Security Advisory: pandoc security update 2026-10-05T09:36:47.802336+00:00

cmark-gfm: Exponential time to parse certain inputs could lead to DoS

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-5238 UBUNTU-CVE-2020-5238 2026-10-05T09:36:47.802354+00:00

Affected: Ubuntu:Pro:20.04:LTS: cmark-gfm, Ubuntu:20.04:LTS: haskell-cmark-gfm, Ubuntu:20.04:LTS: python-cmarkgfm, Ubuntu:20.04:LTS: r-cran-commonmark, Ubuntu:20.04:LTS: ruby-commonmarker, Ubuntu:22.04:LTS: haskell-cmark-gfm, Ubuntu:22.04:LTS: python-cmarkgfm, Ubuntu:22.04:LTS: r-cran-commonmark, Ubuntu:24.04:LTS: haskell-cmark-gfm, Ubuntu:24.04:LTS: python-cmarkgfm and 7 more

The table extension in GitHub Flavored Markdown before version 0.29.0.gfm.1 takes O(n * n) time to parse certain inputs. An attacker could craft a markdown table which would take an unreasonably long time to process, causing a denial of service. This issue does not affect the upstream cmark project. The issue has been fixed in version 0.29.0.gfm.1.