-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| commonmarker | rubygems | < 0.23.4 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from cmark-gfm's table parsing logic. The commit diff shows critical changes in 'row_from_string' (table.c), including the addition of an 'int_overflow_abort' check to prevent UINT16_MAX overflows. Prior to the patch, this function incremented 'n_columns' without overflow validation, allowing attackers to trigger integer overflows via excessive columns. The CVE description and advisory GHSA-mc3g-88wq-6f4x explicitly reference this function as the source of the vulnerability.