VYPR

commonmark

by League

Source repositories

CVEs (1)

  • CVE-2026-86430HigSep 7, 2026
    risk 0.42cvss 7.5epss 0.00

    league/commonmark versions before 2.9.1 contain multiple denial of service vulnerabilities in fenced code block detection, reference link label lookup, and emphasis delimiter processing that perform super-linear work on crafted input. Attackers can submit specially crafted…