CVE-2018-20583
1 advisory.
Packagist/league/commonmark CVE-2018-20583: medium 6.1, EPSS 1.60%
PHP League CommonMark vulnerable to Cross-Site Scripting (XSS)
Action: Upgrade league/commonmark to 0.18.1 or later.
composer require league/commonmark:0.18.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.15.6 | 0.18.1 | - |
Fixed versions
| 0.18.1 |
Sources
- osv: GHSA-qx76-c53f-5c7q
- https://nvd.nist.gov/vuln/detail/CVE-2018-20583
- https://github.com/thephpleague/commonmark/issues/337
- https://commonmark.thephpleague.com/changelog
- https://github.com/FriendsOfPHP/security-advisories/blob/master/league/commonmark/CVE-2018-20583.yaml
- https://github.com/thephpleague/commonmark
- https://github.com/thephpleague/commonmark/releases/tag/0.18.1
CVE-2018-20583 · published · modified · JSON