thephpleague Summary

Latest vulnerabilities published by thephpleague

JSON RSS CSV 🔔 Create Alert Trigger

7 September 2026

Denial of Service Vulnerability in CommonMark by The PHP League
CVE-2026-86435
ThePHPleagueCommonmark8.7HIGH
Denial of Service Vulnerability in League/Commonmark Affected by Slug Collision
CVE-2026-86434
ThePHPleagueCommonmark8.7HIGH
Denial of Service Vulnerability in CommonMark by The PHP League
CVE-2026-86433
ThePHPleagueCommonmark8.7HIGH
Denial of Service in CommonMark XML Renderer by The PHP League
CVE-2026-86432
ThePHPleagueCommonmark6.9MEDIUM
Cross-Site Scripting Vulnerability in league/commonmark Affected by thephpleague
CVE-2026-86431
ThePHPleagueCommonmark6.9MEDIUM
Denial of Service Vulnerabilities in League/CommonMark by The PHP League
CVE-2026-86430
ThePHPleagueCommonmark8.7HIGH
Denial of Service in PHP Markdown Parsing Library by The PHP League
CVE-2026-86429
ThePHPleagueCommonmark8.7HIGH
Denial of Service Vulnerability in CommonMark by The PHP League
CVE-2026-86428
ThePHPleagueCommonmark8.7HIGH

6 August 2026

24 March 2026

Allowlist Bypass Vulnerability in League CommonMark Markdown Parser
CVE-2026-33347
ThePHPleagueCommonmark6.3MEDIUM

7 March 2026

Cross-Site Scripting Vulnerability in league/commonmark PHP Markdown Parser
CVE-2026-30838
ThePHPleagueCommonmark5.1MEDIUM

5 May 2025

XSS Vulnerability in PHP Markdown Parser of League/CommonMark
CVE-2025-46734
ThePHPleagueCommonmark6.4MEDIUM

6 July 2023

league/oauth2-server key exposed in exception message when passing as string and providing invalid pass phrase
CVE-2023-37260
ThePHPleagueOauth2-server8.2HIGH

24 June 2021

Time-of-check Time-of-use (TOCTOU) Race Condition in league/flysystem
CVE-2021-32708
ThePHPleagueFlysystem👾🟡9.8CRITICAL

24 March 2019

Cross-Site Scripting Vulnerability in PHP League CommonMark Library
CVE-2019-10010
ThePHPleagueCommonmark6.1MEDIUM

30 December 2018

Cross-site Scripting Vulnerability in PHP League CommonMark
CVE-2018-20583
ThePHPleagueCommonmark6.1MEDIUM