Skip to content
Threat Feed
Subscribe

Vendor

League

1 brief RSS
medium advisory

Algorithmic Complexity Denial of Service in league/commonmark

A quadratic time complexity vulnerability in the UniqueSlugNormalizer component of league/commonmark 2.x allows attackers to trigger CPU exhaustion via specially crafted Markdown documents.

commonmark +1 denial-of-service algorithmic-complexity vulnerability
1c