Skip to content
OpenAdvisories

Package · Ubuntu

commonmark

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2026-71488

    league/commonmark: Quadratic-time denial of service when parsing crafted Markdown

    league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 0.6.0 until 2.9.0, specially crafted Markdown lines can cause the parser to have quadratic time complexity when converting, because several parsing paths repeatedly rescan …

    thephpleague commonmark league/commonmark php-league-commonmark Debian Ubuntu Packagist
  • Medium 6.1
    CVE-2026-71478

    league/commonmark: AttributesExtension href/src unsafe-link filter bypass via embedded control bytes

    league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 1.5.0 until 2.9.0, the AttributesExtension's href and src unsafe-link filter can be bypassed by embedding control bytes, such as a tab, carriage return, line feed, or leadi…

    thephpleague commonmark league/commonmark php-league-commonmark Debian Ubuntu Packagist