league/commonmark vulnerabilities (TuxCare)
7 vulnerabilities.
-
league/commonmarkTuxCare League CommonMark 1.3.0 before 2.10.2 Stored XSS via DisallowedRawHtml Bypass 5.3 Medium -
league/commonmarkTuxCare league/commonmark: Quadratic-time denial of service when parsing crafted Markdown 7.5 High -
league/commonmarkTuxCare league/commonmark: AttributesExtension href/src unsafe-link filter bypass via embedded control bytes 6.1 Medium -
league/commonmarkTuxCare league/commonmark has an embed extension allowed_domains bypass 6.3 Medium -
league/commonmarkTuxCare league/commonmark: DisallowedRawHtml extension bypass via whitespace in HTML tag names 5.1 Medium -
league/commonmarkTuxCare league/commonmark Cross-site Scripting vulnerability in Attributes extension 6.4 Medium -
league/commonmarkTuxCare league/commonmark before 2.6.0 Denial of Service via Quadratic Complexity 8.7 High