UBUNTU-CVE-2024-58382: High severity ubuntu/php-league-commonmark vulnerability
Published Nov 9, 2026
·Updated
(league/commonmark versions before 2.6.0 contain polynomial time comple ...)
Affected Software
3 affected components
ubuntu/php-league-commonmark*
ubuntu/php-league-commonmark*
ubuntu/php-league-commonmark*
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
league/commonmarkto a version that resolves this vulnerability.Fixed in 2.6.0
Event History
Nov 9, 2026
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The vector is network-accessible, and the CVSS data indicates that no privileges or user interaction are required.
2
Which releases are affected?
league/commonmark versions before 2.6.0 are affected.
3
What is the expected security impact?
The reported impact is high on availability, with no reported confidentiality or integrity impact. The issue is rated high severity with a CVSS score of 8.7.