CVE-2023-37463: cmark-gfm (exact versions not specified); +3 more affected products

CVE-2023-37463 affects cmark-gfm. EPSS 0.00696 (percentile 0.52185), scored 20-Oct-2026. Fixed version: 0.29.0.gfm.13-1. Fixed version: 0.29.0.gfm.13-1. Fixed version: 2024.11.20-1. Fixed version: 2024.11.20-1. Fixed version: 1.9.1-1. Fixed version: 1.9.1-1. Fixed version: 0.23.10-1. Fixed version: 0.23.10-1.

Affected technology

cmark-gfm · Exact affected versions not specified by the source
Vendor not specified by the source

python-cmarkgfm · Exact affected versions not specified by the source
Vendor not specified by the source

r-cran-commonmark · Exact affected versions not specified by the source
Vendor not specified by the source

ruby-commonmarker · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

Published 21-Oct-2026 15:29 UTC

Product: cmark-gfm
CCR priority: 0.2 /100 (P5)
EPSS: 0.00696 · percentile 0.52185 · 2026-10-20
KEV: no

Provenance

OSV.dev · Source record · observed 2026-10-21 07:07:21.683489+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2023-37463.html