PT-2026-84648

🟠 league/commonmark Denial of Service DoS via Algorithmic Complexity, CVE-2025-23029 Medium -DC-Sep2026-2072 https://t.co/4GpShw74kC...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to invalid limit option handling in normalizeOptions in lib/utils.js. An attacker can force oversized request bodies through by supplying an application configuration value for...