CVE-2026-86435

CVE-2026-86435 affects the PHP League/commonmark library (versions 1.5.0 through before 2.8.4) in its Footnote extension . The root cause is a failure to deduplicate footnote definitions, allowing an attacker to craft a document containing duplicate footnote definitions and references that trigge...

EUVD-2026-72393

commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerability in the Footnote extension that fails to deduplicate footnote definitions. Attackers can craft documents with duplicate footnote definitions and references to create quadratic output expansion, consuming excessiv...

PT-2026-86801

commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerability in the Footnote extension that fails to deduplicate footnote definitions. Attackers can craft documents with duplicate footnote definitions and references to create quadratic output expansion, consuming excessiv...