https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-05T11:59:14.889414+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-86432 fkie_cve-2026-86432 2026-10-05T11:59:14.935890+00:00

commonmark versions from 2.0.0 before 2.8.4 contain a denial of service vulnerability in XmlRenderer that emits depth-proportional indentation for every XML tag. Attackers can provide deeply nested Markdown or AST structures to cause quadratic memory consumption and output amplification, exhausting server resources.

 https://vulnerability.circl.lu/vuln/ghsa-f58g-hmv8-g97m GHSA-f58g-hmv8-g97m 2026-10-05T11:59:14.935981+00:00

commonmark versions from 2.0.0 before 2.8.4 contain a denial of service vulnerability in XmlRenderer that emits depth-proportional indentation for every XML tag. Attackers can provide deeply nested Markdown or AST structures to cause quadratic memory consumption and output amplification, exhausting server resources.

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-86432 UBUNTU-CVE-2026-86432 2026-10-05T11:59:14.936020+00:00

Affected: Ubuntu:Pro:20.04:LTS: php-league-commonmark, Ubuntu:Pro:22.04:LTS: php-league-commonmark, Ubuntu:Pro:24.04:LTS: php-league-commonmark, Ubuntu:26.04:LTS: php-league-commonmark

commonmark versions from 2.0.0 before 2.8.4 contain a denial of service vulnerability in XmlRenderer that emits depth-proportional indentation for every XML tag. Attackers can provide deeply nested Markdown or AST structures to cause quadratic memory consumption and output amplification, exhausting server resources.