Security Advisory
CVE-2026-86432
CVSS 5.3
MEDIUM
Vulnerability Description
commonmark versions from 2.0.0 before 2.8.4 contain a denial of service vulnerability in XmlRenderer that emits depth-proportional indentation for every XML tag. Attackers can provide deeply nested Markdown or AST structures to cause quadratic memory consumption and output amplification, exhausting server resources.
Published Date
2026-09-07T13:20:42.600
Data Feed
NIST National Vulnerability Database