github/cmark-gfm

CVE-2020-5238 mentions release 0.29.0.gfm.1 but no such release exists

Closed this issue · 3 comments

keith-packard commented

GHSA-7gc6-9qr5-hc85 says 'fixed in 0.29.0.gfm.1', but that tag doesn't exist yet. I'm wondering if that tag just hasn't been pushed to the repository yet...

pyrmont commented

Is anyone from @github on this? /cc @arthurschreiber @philipturnbull

bolinfest commented

Duplicate of #200?

phillmv commented

Hello,

This release has now been published.

Thanks!

  • 👍1