thephpleague Latest Vulnerabilities

Latest vulnerabilities published by thephpleague

JSON RSS CSV 🔔 Create Alert Trigger

5 May 2025

XSS Vulnerability in PHP Markdown Parser of League/CommonMark
CVE-2025-46734
ThePHPleagueCommonmark6.4MEDIUM

6 July 2023

league/oauth2-server key exposed in exception message when passing as string and providing invalid pass phrase
CVE-2023-37260
ThePHPleagueOauth2-server8.2HIGH

24 June 2021

Time-of-check Time-of-use (TOCTOU) Race Condition in league/flysystem
CVE-2021-32708
ThePHPleagueFlysystem👾🟡EPSS 11%9.8CRITICAL

24 March 2019

Cross-Site Scripting Vulnerability in PHP League CommonMark Library
CVE-2019-10010
ThePHPleagueCommonmark6.1MEDIUM

30 December 2018

Cross-site Scripting Vulnerability in PHP League CommonMark
CVE-2018-20583
ThePHPleagueCommonmark6.1MEDIUM

No more vulnerabilities to load.