Security Advisory

CVE-2026-86428

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-07 12:53:49

Last updated 2026-09-08 12:50:51

Assigner VulnCheck

CVSS score 8.7

State PUBLISHED

Description

commonmark versions from 1.5.0 before 2.10.0 contain a denial of service vulnerability in the AttributesExtension when processing distinctly-named attributes. Attackers can submit Markdown with numerous distinct attribute names to cause quadratic-time attribute merging and filtering, consuming disproportionate CPU resources and preventing legitimate requests from completing.

← Browse all CVEs View on cve.org ↗