[MEDIUM] league/commonmark: Denial of service via deeply nested XML output

PKSA-5mzr-szzf-z6cn GHSA-mj63-m3rc-8ppr

Affected package: league/commonmark

Affected version: >=2.0.0,<2.9.0

Reported by:
GitHub