Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 18
Reset filtersleague/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scan
league/commonmark: Denial of service via distinctly-named attributes in the Attributes extension
league/commonmark: Denial of service in the SmartPunct and Attributes extensions
league/commonmark XSS: `on*` event-handler filter in `AttributesExtension` bypassed with a U+000C form feed
league/commonmark: Denial of service via crafted code fences, reference links, and emphasis delimiters
league/commonmark: Denial of service via deeply nested XML output
league/commonmark: Denial of service via colliding heading slugs
league/commonmark: Denial of service via duplicate footnote definitions
league/commonmark: Denial of service via adjacent inline attribute blocks
league/commonmark: Quadratic-time denial of service when parsing crafted Markdown
league/commonmark: AttributesExtension href/src unsafe-link filter bypass via embedded control bytes
league/commonmark has an embed extension allowed_domains bypass
CommonMark has DisallowedRawHtml extension bypass via whitespace in HTML tag names
league/commonmark contains a XSS vulnerability in Attributes extension
league/commonmark's quadratic complexity bugs may lead to a denial of service
PHP League CommonMark vulnerable to Cross-Site Scripting (XSS)
Moderate severity vulnerability that affects league/commonmark
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.