Cross-Site Scripting (XSS)

league/commonmark is vulnerable to cross-site scripting XSS attacks. The attacks exist because it does not use HTML safe mode to handle untrusted user input...