{"schema":"vulnpedia.research/1","cve":"CVE-2026-105830","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/thephpleague/commonmark/security/advisories/GHSA-3q6v-r5mr-hxv8","tags":["vendor-advisory","exploit","WEB"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-08T15:22:13.400Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-08T15:22:13.400Z","url":"https://github.com/thephpleague/commonmark/security/advisories/GHSA-3q6v-r5mr-hxv8"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-08T17:03:50.815Z","url":"https://github.com/thephpleague/commonmark/security/advisories/GHSA-3q6v-r5mr-hxv8"},{"source":"nvd","sourceId":"CVE-2026-105830","modified":"2026-10-08T21:33:42.423","url":"https://github.com/thephpleague/commonmark/security/advisories/GHSA-3q6v-r5mr-hxv8"},{"source":"ghsa","sourceId":"GHSA-3q6v-r5mr-hxv8","url":"https://github.com/thephpleague/commonmark/security/advisories/GHSA-3q6v-r5mr-hxv8"},{"source":"ghsa","sourceId":"GHSA-3q6v-r5mr-hxv8","modified":"2026-10-09T02:56:07.813643942Z","url":"https://github.com/thephpleague/commonmark/security/advisories/GHSA-3q6v-r5mr-hxv8"}]},{"url":"https://www.vulncheck.com/advisories/league-commonmark-2.0.0-before-2.10.2-quadratic-dos-via-tablestartparser","tags":["third-party-advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-08T15:22:13.400Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-08T15:22:13.400Z","url":"https://www.vulncheck.com/advisories/league-commonmark-2.0.0-before-2.10.2-quadratic-dos-via-tablestartparser"},{"source":"nvd","sourceId":"CVE-2026-105830","modified":"2026-10-08T21:33:42.423","url":"https://www.vulncheck.com/advisories/league-commonmark-2.0.0-before-2.10.2-quadratic-dos-via-tablestartparser"}]},{"url":"https://osv.dev/vulnerability/GHSA-3q6v-r5mr-hxv8","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-3q6v-r5mr-hxv8","modified":"2026-10-09T02:56:07.813643942Z","origins":[{"source":"ghsa","sourceId":"GHSA-3q6v-r5mr-hxv8","url":"https://osv.dev/vulnerability/GHSA-3q6v-r5mr-hxv8"},{"source":"ghsa","sourceId":"GHSA-3q6v-r5mr-hxv8","modified":"2026-10-09T02:56:07.813643942Z","url":"https://osv.dev/vulnerability/GHSA-3q6v-r5mr-hxv8"}]},{"url":"https://github.com/thephpleague/commonmark/commit/5f63680a5e29dd57f9c6be9743b0e90493d3c2d0","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-3q6v-r5mr-hxv8","modified":"2026-10-09T02:56:07.813643942Z","origins":[{"source":"ghsa","sourceId":"GHSA-3q6v-r5mr-hxv8","url":"https://github.com/thephpleague/commonmark/commit/5f63680a5e29dd57f9c6be9743b0e90493d3c2d0"},{"source":"ghsa","sourceId":"GHSA-3q6v-r5mr-hxv8","modified":"2026-10-09T02:56:07.813643942Z","url":"https://github.com/thephpleague/commonmark/commit/5f63680a5e29dd57f9c6be9743b0e90493d3c2d0"}]},{"url":"https://github.com/thephpleague/commonmark","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-3q6v-r5mr-hxv8","modified":"2026-10-09T02:56:07.813643942Z","origins":[{"source":"ghsa","sourceId":"GHSA-3q6v-r5mr-hxv8","url":"https://github.com/thephpleague/commonmark"},{"source":"ghsa","sourceId":"GHSA-3q6v-r5mr-hxv8","modified":"2026-10-09T02:56:07.813643942Z","url":"https://github.com/thephpleague/commonmark"}]},{"url":"https://github.com/thephpleague/commonmark/releases/tag/2.10.2","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-3q6v-r5mr-hxv8","modified":"2026-10-09T02:56:07.813643942Z","origins":[{"source":"ghsa","sourceId":"GHSA-3q6v-r5mr-hxv8","url":"https://github.com/thephpleague/commonmark/releases/tag/2.10.2"},{"source":"ghsa","sourceId":"GHSA-3q6v-r5mr-hxv8","modified":"2026-10-09T02:56:07.813643942Z","url":"https://github.com/thephpleague/commonmark/releases/tag/2.10.2"}]},{"source":"euvd","sourceId":"EUVD-2026-95017","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95017","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-95017","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95017"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-3q6v-r5mr-hxv8","url":"https://osv.dev/vulnerability/GHSA-3q6v-r5mr-hxv8","ecosystem":"Packagist","name":"league/commonmark","purl":"pkg:composer/league/commonmark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.0"},{"fixed":"2.10.2"}]}],"versions":["2.0.0","2.0.1","2.0.2","2.0.3","2.0.4","2.1.0","2.1.1","2.1.2","2.1.3","2.10.0","2.10.1","2.2.0","2.2.1","2.2.2","2.2.3","2.2.4","2.2.5","2.3.0","2.3.1","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.9","2.4.0","2.4.1","2.4.2","2.4.3","2.4.4","2.5.0","2.5.1","2.5.2","2.5.3","2.6.0","2.6.1","2.6.2","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.8.3","2.9.0","2.9.1","2.9.2"],"databaseSpecific":{"last_known_affected_version_range":"<= 2.10.1","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/09/GHSA-3q6v-r5mr-hxv8/GHSA-3q6v-r5mr-hxv8.json"},"modified":"2026-10-09T02:56:07.813643942Z","origins":[{"source":"ghsa","sourceId":"GHSA-3q6v-r5mr-hxv8","modified":"2026-10-09T02:56:07.813643942Z","url":"https://osv.dev/vulnerability/GHSA-3q6v-r5mr-hxv8"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}