Repository navigation
Security: commonmark/commonmark-java
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Block-start checks copy the whole open paragraph on every line, so parsing is quadratic in the number of lines (CPU exhaustion from plain-text Markdown)GHSA-mg3c-47fx-jhgf published
Oct 22, 2026 by robinstHigh -
Nested image brackets parse in quadratic timeGHSA-g3cr-8x4q-74q3 published
Oct 22, 2026 by robinstModerate -
Quadratic parse time in yaml-front-matter extension via literal-block string rebuild (denial of service)GHSA-2fp3-8mqp-6435 published
Oct 22, 2026 by robinstModerate -
Quadratic resource exhaustion in the GFM-tables (denial of service)GHSA-cx98-gqcg-rp8q published
Oct 22, 2026 by robinstHigh -
Quadratic parse time from emphasis delimiter rescan (rule-of-three) in default parser (denial of service)GHSA-cc3j-83v5-hqfg published
Oct 22, 2026 by robinstModerate -
Unbounded forward scans in default parser (unclosed '<' and backtick runs) cause quadratic parse time (denial of service)GHSA-vwrf-xrcv-x2rr published
Oct 22, 2026 by robinstModerate -
Regex recursion in default parser (HTML-block attributes and autolink email) causes StackOverflowError (denial of service)GHSA-cxq4-f84x-5ph8 published
Oct 22, 2026 by robinstModerate -
Uncontrolled recursion parsing deeply nested inline emphasis causes StackOverflowError (denial of service)GHSA-5g96-4gff-g8g2 published
Oct 22, 2026 by robinstModerate
Learn more about advisories related to commonmark/commonmark-java in the GitHub Advisory Database