{
  "affected": [
    {
      "affectedData": [
        {
          "product": "rdiscount",
          "vendor": "davidfstr",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 1.3.1.1, \u003c 2.2.7.4"
            }
          ]
        }
      ],
      "source": "security-advisories@github.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:dafoster:rdiscount:*:*:*:*:*:ruby:*:*",
              "matchCriteriaId": "CD92C2DB-DEF1-4154-A725-76F41B1A0BBC",
              "versionEndExcluding": "2.2.7.4",
              "versionStartIncluding": "1.3.1.1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Discount is an implementation of John Gruber\u0027s Markdown markup language in C. From 1.3.1.1 to before 2.2.7.4, a signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INT_MAX are truncated to a signed int before entering the native parser, allowing the parser to read past the end of the supplied buffer and crash the process. This vulnerability is fixed in 2.2.7.4."
    },
    {
      "lang": "es",
      "value": "Discount es una implementaci\u00f3n del lenguaje de marcado Markdown de John Gruber en C. Desde la 1.3.1.1 hasta antes de la 2.2.7.4, un error de truncamiento de longitud con signo causa una lectura fuera de l\u00edmites en la ruta de an\u00e1lisis de Markdown predeterminada. Las entradas mayores que INT_MAX se truncan a un entero con signo antes de entrar al analizador nativo, permitiendo que el analizador lea m\u00e1s all\u00e1 del final del b\u00fafer suministrado y bloquee el proceso. Esta vulnerabilidad se corrige en la 2.2.7.4."
    }
  ],
  "id": "CVE-2026-35201",
  "lastModified": "2026-07-24T21:10:00.143",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 5.9,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.2,
        "impactScore": 3.6,
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-35201",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-04-07T16:21:05.300982Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-04-06T20:16:27.893",
  "references": [
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "url": "https://github.com/davidfstr/rdiscount/security/advisories/GHSA-6r34-94wq-jhrc"
    }
  ],
  "sourceIdentifier": "security-advisories@github.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-125"
        }
      ],
      "source": "security-advisories@github.com",
      "type": "Secondary"
    }
  ]
}