[ Vendor · 3 CVEs ]
thephpleague
CVEs affecting thephpleague published in the last 30 days, plus any thephpleague CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-105829 | 8 Oct 2026 | CVSS 6.1 | thephpleague commonmarkLeague CommonMark from 1.3.0 before 2.10.2 contains a cross-site scripting vulnerability that allows users posting Markdown to bypass the… | |
| CVE-2026-105830 | 8 Oct 2026 | CVSS 7.5 | thephpleague commonmarkleague/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table… | |
| CVE-2026-102601 | 29 Sep 2026 | CVSS 3.5 | Flysystem: WhitespacePathNormalizer's control-character (CorruptedPathDetected) check is bypassed by malformed UTF-8 in the path, affecting every adapterFlysystem is an open source file storage library for PHP. Prior to 3.35.3, the default WhitespacePathNormalizer in src/WhitespacePathNormalizer.php… | Fix |