thephpleague commonmark

9 known vulnerabilities in thephpleague commonmark, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2024-58382 CVSS 8.7 high league/commonmark versions before 2.6.0 contain polynomial time complexity vulnerabilities in Markdown parsing that allow attackers to…
  • CVE-2026-86435 CVSS 8.7 high commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerability in the Footnote extension that fails to deduplicate…
  • CVE-2026-86434 CVSS 8.7 high league/commonmark versions >= 2.0.0 and < 2.8.4 (patched in 2.9.0) contain a denial of service vulnerability in…
  • CVE-2026-86433 CVSS 8.7 high commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerability in the Attributes extension where…
  • CVE-2026-86432 CVSS 6.9 medium commonmark versions from 2.0.0 before 2.8.4 contain a denial of service vulnerability in XmlRenderer that emits depth-proportional…
  • CVE-2026-86431 CVSS 6.9 medium league/commonmark (thephpleague/commonmark) versions >= 2.7.0 and < 2.9.1 contain a cross-site scripting vulnerability in the…
  • CVE-2026-86430 CVSS 8.7 high league/commonmark versions before 2.9.1 contain multiple denial of service vulnerabilities in fenced code block detection, reference link…
  • CVE-2026-86429 CVSS 8.7 high The league/commonmark (thephpleague/commonmark) library in versions >= 1.5.0 and < 2.9.1 contains quadratic parsing complexity in its…
  • CVE-2026-86428 CVSS 8.7 high commonmark versions from 1.5.0 before 2.10.0 contain a denial of service vulnerability in the AttributesExtension when processing…