Product

Commonmark (>= 2.0.0, < 2.9.0)

1 brief RSS

Algorithmic Complexity Denial of Service in league/commonmark

A quadratic time complexity vulnerability in the UniqueSlugNormalizer component of league/commonmark 2.x allows attackers to trigger CPU exhaustion via specially crafted Markdown documents.

commonmark +1 denial-of-service algorithmic-complexity vulnerability

1c 4h ago