league/commonmark Security Advisories for 2.10.0 (2)
-
[MEDIUM] league/commonmark: DisallowedRawHtml bypassed when a disallowed tag name ends the raw-HTML literal
PKSA-m2dq-1fhr-29b1 GHSA-97jj-33gv-5xf9
Affected version: >=1.3.0,<=2.10.1
Reported by:
GitHub -
[HIGH] league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scan
PKSA-m4t9-vsgq-8khn GHSA-3q6v-r5mr-hxv8
Affected version: >=2.0.0,<=2.10.1
Reported by:
GitHub