Security
English
همهٔ محصولات

league/commonmark

Composer · بسته
18 گزارش
اطلاع‌رسانی آسیب‌پذیری
دنبال‌کردن
گزارشمحصولاکوسیستمشدتوضعیت اصلاحآخرین تغییر
league/commonmark: Denial of service via colliding heading slugsCVE-2026-86434 · GHSA-MH25-X5HQ-WRQP league/commonmark Composer زیاد اصلاح گزارش شده
league/commonmark: DisallowedRawHtml bypassed when a disallowed tag name ends the raw-HTML literalCVE-2026-105829 · GHSA-97JJ-33GV-5XF9 league/commonmark Composer متوسط اصلاح گزارش شده
league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scanCVE-2026-105830 · GHSA-3Q6V-R5MR-HXV8 league/commonmark Composer زیاد اصلاح گزارش شده
league/commonmark's quadratic complexity bugs may lead to a denial of serviceCVE-2024-58382 · GHSA-C2PC-G5QF-RFRF league/commonmark Composer زیاد اصلاح گزارش شده
league/commonmark: Denial of service via crafted code fences, reference links, and emphasis delimitersCVE-2026-86430 · GHSA-J8PM-GJ4C-RQ4X league/commonmark Composer زیاد اصلاح گزارش شده
league/commonmark XSS: `on*` event-handler filter in `AttributesExtension` bypassed with a U+000C form feedCVE-2026-86431 · GHSA-F8FG-PG57-V4J8 league/commonmark Composer زیاد اصلاح گزارش شده
league/commonmark: Denial of service via distinctly-named attributes in the Attributes extensionCVE-2026-86428 · GHSA-8RR7-CVQ3-GMFH league/commonmark Composer زیاد اصلاح گزارش شده
league/commonmark: Denial of service in the SmartPunct and Attributes extensionsCVE-2026-86429 · GHSA-JJV6-8J6V-6J52 league/commonmark Composer زیاد اصلاح گزارش شده
league/commonmark: AttributesExtension href/src unsafe-link filter bypass via embedded control bytesCVE-2026-71478 · GHSA-29PJ-957V-52MC league/commonmark Composer متوسط اصلاح گزارش شده
league/commonmark: Quadratic-time denial of service when parsing crafted MarkdownCVE-2026-71488 · GHSA-2Q4P-G7HV-5RGV league/commonmark Composer زیاد اصلاح گزارش شده
league/commonmark: Denial of service via deeply nested XML outputGHSA-MJ63-M3RC-8PPR league/commonmark Composer متوسط اصلاح گزارش شده
league/commonmark: Denial of service via duplicate footnote definitionsGHSA-JFM3-95JQ-Q3RF league/commonmark Composer زیاد اصلاح گزارش شده
league/commonmark: Denial of service via adjacent inline attribute blocksGHSA-G2GP-3WWQ-F4PH league/commonmark Composer زیاد اصلاح گزارش شده
league/commonmark contains a XSS vulnerability in Attributes extensionCVE-2025-46734 · GHSA-3527-QV2Q-PFVX league/commonmark Composer متوسط اصلاح گزارش شده
league/commonmark has an embed extension allowed_domains bypassCVE-2026-33347 · GHSA-HH8V-HGVP-G3F5 league/commonmark Composer متوسط اصلاح گزارش شده
CommonMark has DisallowedRawHtml extension bypass via whitespace in HTML tag namesCVE-2026-30838 · GHSA-4V6X-C7XX-HW9F league/commonmark Composer متوسط اصلاح گزارش شده
PHP League CommonMark vulnerable to Cross-Site Scripting (XSS)CVE-2018-20583 · GHSA-QX76-C53F-5C7Q league/commonmark Composer متوسط اصلاح گزارش شده
Moderate severity vulnerability that affects league/commonmarkCVE-2019-10010 · GHSA-3V43-877X-QGMQ league/commonmark Composer متوسط اصلاح گزارش شده