league/commonmark
Highly-extensible PHP Markdown parser which fully supports the CommonMark spec and GitHub-Flavored Markdown (GFM)
Security Advisories for league/commonmark in packagist
Moderate
about 1 month ago
league/commonmark: DisallowedRawHtml bypassed when a disallowed tag name ends the raw-HTML literal
packagist
league/commonmark
High
about 1 month ago
league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scan
packagist
league/commonmark
High
2 months ago
league/commonmark: Denial of service via distinctly-named attributes in the Attributes extension
packagist
league/commonmark
High
2 months ago
league/commonmark: Denial of service in the SmartPunct and Attributes extensions
packagist
league/commonmark
High
2 months ago
league/commonmark XSS: `on*` event-handler filter in `AttributesExtension` bypassed with a U+000C form feed
packagist
league/commonmark
High
2 months ago
league/commonmark: Denial of service via crafted code fences, reference links, and emphasis delimiters
packagist
league/commonmark
Moderate
3 months ago
league/commonmark: Denial of service via deeply nested XML output
packagist
league/commonmark
High
3 months ago
league/commonmark: Denial of service via colliding heading slugs
packagist
league/commonmark
High
3 months ago
league/commonmark: Denial of service via duplicate footnote definitions
packagist
league/commonmark
High
3 months ago
league/commonmark: Denial of service via adjacent inline attribute blocks
packagist
league/commonmark
High
3 months ago
league/commonmark: Quadratic-time denial of service when parsing crafted Markdown
packagist
league/commonmark
Moderate
3 months ago
league/commonmark: AttributesExtension href/src unsafe-link filter bypass via embedded control bytes
packagist
league/commonmark
Moderate
8 months ago
league/commonmark has an embed extension allowed_domains bypass
packagist
league/commonmark
Moderate
8 months ago
CommonMark has DisallowedRawHtml extension bypass via whitespace in HTML tag names
packagist
league/commonmark
Moderate
over 1 year ago
league/commonmark contains a XSS vulnerability in Attributes extension
packagist
league/commonmark
High
almost 2 years ago
league/commonmark's quadratic complexity bugs may lead to a denial of service
packagist
league/commonmark
Moderate
over 4 years ago
PHP League CommonMark vulnerable to Cross-Site Scripting (XSS)
packagist
league/commonmark
Moderate
about 7 years ago
Moderate severity vulnerability that affects league/commonmark
packagist
league/commonmark