league/commonmark vulnerabilities (Packagist)
9 vulnerabilities.
-
league/commonmarkPackagist League CommonMark 1.3.0 before 2.10.2 Stored XSS via DisallowedRawHtml Bypass 5.3 Medium -
league/commonmarkPackagist league/commonmark: Quadratic-time denial of service when parsing crafted Markdown 7.5 High -
league/commonmarkPackagist league/commonmark: AttributesExtension href/src unsafe-link filter bypass via embedded control bytes 6.1 Medium -
league/commonmarkPackagist league/commonmark has an embed extension allowed_domains bypass 6.3 Medium -
league/commonmarkPackagist league/commonmark: DisallowedRawHtml extension bypass via whitespace in HTML tag names 5.1 Medium -
league/commonmarkPackagist league/commonmark Cross-site Scripting vulnerability in Attributes extension 6.4 Medium -
league/commonmarkPackagist league/commonmark before 2.6.0 Denial of Service via Quadratic Complexity 8.7 High -
league/commonmarkPackagist Moderate severity vulnerability that affects league/commonmark 6.1 Medium -
league/commonmarkPackagist PHP League CommonMark vulnerable to Cross-Site Scripting (XSS) 6.1 Medium