WS-2026-0056

league/commonmark generated footnote backrefs in quadratic time when a document contained duplicate footnote definitions, so such a document can be abused for denial of service. Footnote labels were also treated as dot- and slash-delimited key paths when storing backrefs, letting distinct labels...