Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/league/commonmark@0.18.3
purl pkg:composer/league/commonmark@0.18.3
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-1cv7-q2cn-byh6 Cross-site Scripting Cross-site scripting (XSS) vulnerability in the PHP League CommonMark library allows remote attackers to insert unsafe links into HTML by using double-encoded HTML entities that are not properly escaped during rendering, a different vulnerability than CVE-2018-20583. CVE-2019-10010
GHSA-3v43-877x-qgmq

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-31T11:18:29.911337+00:00 GithubOSV Importer Fixing VCID-1cv7-q2cn-byh6 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2019/09/GHSA-3v43-877x-qgmq/GHSA-3v43-877x-qgmq.json 38.6.0
2026-05-31T00:51:56.057051+00:00 GHSA Importer Fixing VCID-1cv7-q2cn-byh6 https://github.com/advisories/GHSA-3v43-877x-qgmq 38.6.0
2026-05-30T20:54:54.841847+00:00 GitLab Importer Fixing VCID-1cv7-q2cn-byh6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/league/commonmark/CVE-2019-10010.yml 38.6.0