[MEDIUM] league/commonmark: DisallowedRawHtml bypassed when a disallowed tag name ends the raw-HTML literal

PKSA-m2dq-1fhr-29b1 GHSA-97jj-33gv-5xf9

Affected package: league/commonmark

Affected version: >=1.3.0,<=2.10.1

Reported by:
GitHub