Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-97jj-33gv-5xf9
  • Packagist/league/commonmark
 league/commonmark: DisallowedRawHtml bypassed when a disallowed tag name ends the raw-HTML literal 5 days ago
  • Fix available
  • Severity - 6.1 (Medium)
GHSA-3q6v-r5mr-hxv8
  • Packagist/league/commonmark
 league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scan 5 days ago
  • Fix available
  • Severity - 7.5 (High)
CLSA-2026-1789061392
  • TuxCare:Packagist/league/commonmark
 TuxCare security update for league/commonmark (3 CVEs) 10 Sep
  • Fix available
CLSA-2026-1788974290
  • TuxCare:Packagist/league/commonmark
 TuxCare security update for league/commonmark (4 CVEs) 09 Sep
  • Fix available
CLSA-2026-1788973862
  • TuxCare:Packagist/league/commonmark
 TuxCare security update for league/commonmark (4 CVEs) 09 Sep
  • Fix available
GHSA-8rr7-cvq3-gmfh
  • Packagist/league/commonmark
 league/commonmark: Denial of service via distinctly-named attributes in the Attributes extension 01 Sep
  • Fix available
  • Severity - 7.5 (High)
GHSA-jjv6-8j6v-6j52
  • Packagist/league/commonmark
 league/commonmark: Denial of service in the SmartPunct and Attributes extensions 01 Sep
  • Fix available
  • Severity - 7.5 (High)
GHSA-f8fg-pg57-v4j8
  • Packagist/league/commonmark
 league/commonmark XSS: `on*` event-handler filter in `AttributesExtension` bypassed with a U+000C form feed 01 Sep
  • Fix available
  • Severity - 7.2 (High)
GHSA-j8pm-gj4c-rq4x
  • Packagist/league/commonmark
 league/commonmark: Denial of service via crafted code fences, reference links, and emphasis delimiters 01 Sep
  • Fix available
  • Severity - 7.5 (High)
CLSA-2026-1788257590
  • TuxCare:Packagist/league/commonmark
 TuxCare security update for league/commonmark (6 CVEs) 01 Sep
  • Fix available
CLSA-2026-1788257456
  • TuxCare:Packagist/league/commonmark
 TuxCare security update for league/commonmark (6 CVEs) 01 Sep
  • Fix available
CLSA-2026-1788257350
  • TuxCare:Packagist/league/commonmark
 TuxCare security update for league/commonmark (4 CVEs) 01 Sep
  • Fix available
GHSA-mj63-m3rc-8ppr
  • Packagist/league/commonmark
 league/commonmark: Denial of service via deeply nested XML output 06 Aug
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-mh25-x5hq-wrqp
  • Packagist/league/commonmark
 league/commonmark: Denial of service via colliding heading slugs 06 Aug
  • Fix available
  • Severity - 7.5 (High)
GHSA-jfm3-95jq-q3rf
  • Packagist/league/commonmark
 league/commonmark: Denial of service via duplicate footnote definitions 06 Aug
  • Fix available
  • Severity - 7.5 (High)
GHSA-g2gp-3wwq-f4ph
  • Packagist/league/commonmark
 league/commonmark: Denial of service via adjacent inline attribute blocks 06 Aug
  • Fix available
  • Severity - 7.5 (High)
Load more...