PkgSeer

Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
league/commonmark league/commonmark: DisallowedRawHtml bypassed when a disallowed tag name ends the raw-HTML literal Medium Risk 6.1 4 hours ago 3 hours ago
league/commonmark league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scan High Risk 7.5 4 hours ago 3 hours ago
league/commonmark league/commonmark's quadratic complexity bugs may lead to a denial of service High Risk 7.5 1 year ago 20 days ago
league/commonmark league/commonmark: Denial of service via crafted code fences, reference links, and emphasis delimiters High Risk 7.5 28 days ago 22 days ago
league/commonmark league/commonmark XSS: `on*` event-handler filter in `AttributesExtension` bypassed with a U+000C form feed High Risk 7.2 28 days ago 22 days ago
league/commonmark league/commonmark: Denial of service via distinctly-named attributes in the Attributes extension High Risk 7.5 28 days ago 22 days ago
league/commonmark league/commonmark: Denial of service in the SmartPunct and Attributes extensions High Risk 7.5 28 days ago 22 days ago
league/commonmark league/commonmark: AttributesExtension href/src unsafe-link filter bypass via embedded control bytes Medium Risk 6.1 1 month ago 1 month ago
league/commonmark league/commonmark: Quadratic-time denial of service when parsing crafted Markdown High Risk 7.5 1 month ago 1 month ago
league/commonmark league/commonmark: Denial of service via adjacent inline attribute blocks High Risk 7.5 1 month ago 1 month ago
league/commonmark league/commonmark: Denial of service via duplicate footnote definitions High Risk 7.5 1 month ago 1 month ago
league/commonmark league/commonmark: Denial of service via colliding heading slugs High Risk 7.5 1 month ago 1 month ago
league/commonmark league/commonmark: Denial of service via deeply nested XML output Medium Risk 5.3 1 month ago 1 month ago
league/commonmark league/commonmark has an embed extension allowed_domains bypass Medium Risk 6.0 6 months ago 6 months ago
league/commonmark CommonMark has DisallowedRawHtml extension bypass via whitespace in HTML tag names Medium Risk 6.0 6 months ago 6 months ago
league/commonmark league/commonmark contains a XSS vulnerability in Attributes extension Medium Risk 6.4 1 year ago 6 months ago
league/commonmark PHP League CommonMark vulnerable to Cross-Site Scripting (XSS) Medium Risk 6.1 4 years ago 2 years ago
league/commonmark Moderate severity vulnerability that affects league/commonmark Medium Risk 6.1 7 years ago 2 years ago
Data courtesy of OSV.dev
Page 1