<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: discount project</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2018-12495: The quoteblock function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a d</title><link>https://patchthecve.com/cve/CVE-2018-12495.html</link><guid>https://patchthecve.com/cve/CVE-2018-12495.html</guid><pubDate>Wed, 17 Jun 2026 01:37:52 +0000</pubDate><description>MEDIUM 5.5: The quoteblock function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file.</description></item><item><title>CVE-2018-11504: The islist function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denia</title><link>https://patchthecve.com/cve/CVE-2018-11504.html</link><guid>https://patchthecve.com/cve/CVE-2018-11504.html</guid><pubDate>Wed, 17 Jun 2026 01:36:04 +0000</pubDate><description>MEDIUM 5.5: The islist function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file, as demonstrated by mkd2html.</description></item><item><title>CVE-2018-11503: The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a d</title><link>https://patchthecve.com/cve/CVE-2018-11503.html</link><guid>https://patchthecve.com/cve/CVE-2018-11503.html</guid><pubDate>Wed, 17 Jun 2026 01:36:04 +0000</pubDate><description>MEDIUM 5.5: The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file, as demonstrated by mkd2html.</description></item><item><title>CVE-2018-11468: The __mkd_trim_line function in mkdio.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a</title><link>https://patchthecve.com/cve/CVE-2018-11468.html</link><guid>https://patchthecve.com/cve/CVE-2018-11468.html</guid><pubDate>Wed, 17 Jun 2026 01:35:59 +0000</pubDate><description>MEDIUM 5.5: The __mkd_trim_line function in mkdio.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file, as demonstrated by mkd2html.</description></item></channel></rss>