https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T13:11:47.766460+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-105830 CVE-2026-105830 — league/commonmark 2.0.0 before 2.10.2 Quadratic DoS via TableStartParser 2026-10-10T13:11:47.767494+00:00

Affected: thephpleague commonmark

league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table extension's TableStartParser::tryStart() block-start scan. Unauthenticated attackers can submit a large paragraph of pipe-free lines not starting with letters, forcing repeated full-buffer strpos scans that exhaust PHP worker CPU.