Media
CVE-2026-105829
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 18
Restablecer filtros
Alta
CVE-2026-105830
league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scan
Alta
CVE-2026-86428
league/commonmark: Denial of service via distinctly-named attributes in the Attributes extension
Alta
CVE-2026-86429
league/commonmark: Denial of service in the SmartPunct and Attributes extensions
Alta
CVE-2026-86431
league/commonmark XSS: `on*` event-handler filter in `AttributesExtension` bypassed with a U+000C form feed
Alta
CVE-2026-86430
league/commonmark: Denial of service via crafted code fences, reference links, and emphasis delimiters
Media
ghsa-mj63-m3rc-8ppr
league/commonmark: Denial of service via deeply nested XML output
Alta
CVE-2026-86434
league/commonmark: Denial of service via colliding heading slugs
Alta
ghsa-jfm3-95jq-q3rf
league/commonmark: Denial of service via duplicate footnote definitions
Alta
ghsa-g2gp-3wwq-f4ph
league/commonmark: Denial of service via adjacent inline attribute blocks
Alta
CVE-2026-71488
league/commonmark: Quadratic-time denial of service when parsing crafted Markdown
Media
CVE-2026-71478
league/commonmark: AttributesExtension href/src unsafe-link filter bypass via embedded control bytes
Media
CVE-2026-33347
league/commonmark has an embed extension allowed_domains bypass
Media
CVE-2026-30838
CommonMark has DisallowedRawHtml extension bypass via whitespace in HTML tag names
Media
CVE-2025-46734
league/commonmark contains a XSS vulnerability in Attributes extension
Alta
CVE-2024-58382
league/commonmark's quadratic complexity bugs may lead to a denial of service
Media
CVE-2018-20583
PHP League CommonMark vulnerable to Cross-Site Scripting (XSS)
Media
CVE-2019-10010
Moderate severity vulnerability that affects league/commonmark
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.