Skip to content
OpenAdvisories

Package · Ubuntu

commonmark

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-71478

    league/commonmark: AttributesExtension href/src unsafe-link filter bypass via embedded control bytes

    league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 1.5.0 until 2.9.0, the AttributesExtension's href and src unsafe-link filter can be bypassed by embedding control bytes, such as a tab, carriage return, line feed, or leadi…

    thephpleague commonmark league/commonmark php-league-commonmark Debian Ubuntu Packagist