CVE-2024-58382
1 advisory.
Packagist/league/commonmark CVE-2024-58382: high 7.5, EPSS 0.28%
league/commonmark's quadratic complexity bugs may lead to a denial of service
Action: Upgrade league/commonmark to 2.6.0 or later.
composer require league/commonmark:2.6.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.6.0 | - |
Fixed versions
| 2.6.0 |
Sources
- osv: GHSA-c2pc-g5qf-rfrf
- https://github.com/github/cmark-gfm/security/advisories/GHSA-24f7-9frr-5h2r
- https://github.com/github/cmark-gfm/security/advisories/GHSA-29g3-96g3-jg6c
- https://github.com/github/cmark-gfm/security/advisories/GHSA-66g8-4hjf-77xh
- https://github.com/github/cmark-gfm/security/advisories/GHSA-r572-jvj2-3m8p
- https://github.com/github/cmark-gfm/security/advisories/GHSA-r8vr-c48j-fcc5
- https://github.com/github/cmark-gfm/security/advisories/GHSA-w4qg-3vf7-m9x5
- https://github.com/thephpleague/commonmark/security/advisories/GHSA-c2pc-g5qf-rfrf
- https://github.com/commonmark/commonmark.js/issues/129
- https://github.com/commonmark/commonmark.js/issues/157
- https://github.com/commonmark/commonmark.js/issues/172
- https://github.com/thephpleague/commonmark
CVE-2024-58382 · published · modified · JSON