[HIGH] league/commonmark's quadratic complexity bugs may lead to a denial of service

PKSA-fndg-qryc-dyc9 GHSA-c2pc-g5qf-rfrf

Affected version: <2.6.0

Reported by:
GitHub