https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:21:33.232310+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-364952 EUVD-2026-364952 2026-10-03T20:21:33.298365+00:00 EUVD-2026-364952 https://cve.radiocsirt.org/vuln/fkie_cve-2026-86433 fkie_cve-2026-86433 2026-10-03T20:21:33.298409+00:00

commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerability in the Attributes extension where AttributesListener::findTargetAndDirection() performs quadratic-time sibling list scanning. Unauthenticated attackers can submit approximately 32 KB of repeated attribute blocks to cause parsing to take over 5 seconds, exhausting server resources.

 https://cve.radiocsirt.org/vuln/ghsa-f9pm-gcpp-fwjp GHSA-f9pm-gcpp-fwjp 2026-10-03T20:21:33.298444+00:00

commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerability in the Attributes extension where AttributesListener::findTargetAndDirection() performs quadratic-time sibling list scanning. Unauthenticated attackers can submit approximately 32 KB of repeated attribute blocks to cause parsing to take over 5 seconds, exhausting server resources.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-86433 UBUNTU-CVE-2026-86433 2026-10-03T20:21:33.298463+00:00

Affected: Ubuntu:Pro:20.04:LTS: php-league-commonmark, Ubuntu:Pro:22.04:LTS: php-league-commonmark, Ubuntu:Pro:24.04:LTS: php-league-commonmark, Ubuntu:26.04:LTS: php-league-commonmark

commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerability in the Attributes extension where AttributesListener::findTargetAndDirection() performs quadratic-time sibling list scanning. Unauthenticated attackers can submit approximately 32 KB of repeated attribute blocks to cause parsing to take over 5 seconds, exhausting server resources.