Homepage

league/commonmark

Licenses: BSD-3-Clause

License

BSD-3-Clause>=0;
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the league/commonmark package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • H
Inefficient Algorithmic Complexity

>=2.0.0, <2.10.2
  • M
Cross-site Scripting (XSS)

>=1.3.0, <2.10.2
  • H
Inefficient Algorithmic Complexity

>=0.6.0, <2.9.1
  • M
Cross-site Scripting (XSS)

>=2.7.0, <2.9.1
  • H
Inefficient Algorithmic Complexity

>=1.5.0, <2.10.0
  • H
Inefficient Algorithmic Complexity

>=1.5.0, <2.9.1
  • M
Incomplete Denylist to Cross-Site Scripting

>=1.5.0, <2.9.0
  • H
Inefficient Algorithmic Complexity

>=2.0.0, <2.9.0
  • M
Asymmetric Resource Consumption (Amplification)

>=2.0.0, <2.9.0
  • H
Inefficient Algorithmic Complexity

>=1.5.0, <2.9.0
  • H
Excessive Platform Resource Consumption within a Loop

>=0.6.0, <2.9.0
  • H
Inefficient Algorithmic Complexity

>=1.5.0, <2.9.0
  • M
Server-side Request Forgery (SSRF)

>=2.3.0, <2.8.2
  • M
Cross-site Scripting (XSS)

<2.8.1
  • M
Cross-site Scripting (XSS)

>=1.5.0, <2.7.0
  • H
Inefficient Algorithmic Complexity

<2.6.0
  • M
Cross-site Scripting (XSS)

<0.18.3
  • M
Cross-site Scripting (XSS)

<0.18.3
  • M
Cross-site Scripting (XSS)

>=0.15.6, <0.18.1
  • M
Cross-site Scripting (XSS)

>=0.15.6, <0.18.1