https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 19:53:21 +0000 https://vulnerability.circl.lu/vuln/cve-2026-35201 <p><strong>Affected:</strong> davidfstr rdiscount</p> <p>Discount is an implementation of John Gruber&#39;s Markdown markup language in C. From 1.3.1.1 to before 2.2.7.4, a signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INT_MAX are truncated to a signed int before entering the native parser, allowing the parser to read past the end of the supplied buffer and crash the process. This vulnerability is fixed in 2.2.7.4.</p> <p><strong>Affected:</strong> davidfstr rdiscount</p> <p>Discount is an implementation of John Gruber&#39;s Markdown markup language in C. From 1.3.1.1 to before 2.2.7.4, a signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INT_MAX are truncated to a signed int before entering the native parser, allowing the parser to read past the end of the supplied buffer and crash the process. This vulnerability is fixed in 2.2.7.4.</p> https://vulnerability.circl.lu/vuln/cve-2026-35201