Skip to content
Threat Feed
Subscribe

Vendor

League

2 briefs RSS
low advisory

Denial of Service Vulnerability in league/commonmark

The league/commonmark library is susceptible to a denial of service attack via crafted Markdown input that triggers quadratic CPU complexity in slug normalization.

commonmark
1t 1c
medium advisory

Algorithmic Complexity Denial of Service in league/commonmark

A quadratic time complexity vulnerability in the UniqueSlugNormalizer component of league/commonmark 2.x allows attackers to trigger CPU exhaustion via specially crafted Markdown documents.

commonmark +1 denial-of-service algorithmic-complexity vulnerability
1c