thephpleague kayıtları
thephpleague üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-407 Inefficient Algorithmic Complexity3
- CWE-209 Generation of Error Message Containing Sensitive Information1
- CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
34İzleyin | CVE-2026-86429İstismar yok | commonmark before 2.9.1 Denial of Service via SmartPunct and Attributesthephpleague · commonmark · CWE-407 | Yüksek8,7 | — | %0,5 | 7 Eyl 2026 |
34İzleyin | CVE-2026-86428İstismar yok | commonmark 1.5.0 before 2.10.0 Denial of Service via Attributesthephpleague · commonmark · CWE-407 | Yüksek8,7 | — | %0,4 | 7 Eyl 2026 |
34İzleyin | CVE-2026-86430İstismar yok | league/commonmark before 2.9.1 Denial of Service via parsingthephpleague · commonmark · CWE-407 | Yüksek8,7 | — | %0,4 | 7 Eyl 2026 |
33İzleyin | CVE-2021-32708Kavram kanıtı | Time-of-check Time-of-use (TOCTOU) Race Condition in league/flysystemthephpleague · flysystem · CWE-367 | Yüksek8,1 | — | %3,4 | 24 Haz 2021 |
30İzleyin | CVE-2023-37260İstismar yok | league/oauth2-server key exposed in exception message when passing as string and providing invalid pass phrasethephpleague · oauth2-server · CWE-209 | Yüksek7,5 | — | %0,9 | 6 Tem 2023 |
27İzleyin | CVE-2026-86431İstismar yok | commonmark before 2.9.1 XSS via AttributesExtension form feed bypassthephpleague · commonmark · CWE-79 | Orta6,9 | — | %0,3 | 7 Eyl 2026 |
25İzleyin | CVE-2018-20583İstismar yok | Cross-site scripting (XSS) vulnerability in the PHP League CommonMark library versions 0.15.6 through 0.18.x before 0.18.1 allows remote attthephpleague · commonmark · CWE-79 | Orta6,1 | — | %1,8 | 30 Ara 2018 |
25İzleyin | CVE-2026-33347İstismar yok | league/commonmark has an embed extension allowed_domains bypassthephpleague · commonmark · CWE-79 | Orta6,3 | — | %0,2 | 24 Mar 2026 |
24İzleyin | CVE-2019-10010İstismar yok | Cross-site scripting (XSS) vulnerability in the PHP League CommonMark library before 0.18.3 allows remote attackers to insert unsafe links ithephpleague · commonmark · CWE-79 | Orta6,1 | — | %1,0 | 24 Mar 2019 |
20İzleyin | CVE-2026-30838İstismar yok | league/commonmark: DisallowedRawHtml extension bypass via whitespace in HTML tag namesthephpleague · commonmark · CWE-79 | Orta5,1 | — | %0,2 | 7 Mar 2026 |
- CVE-2026-8642934İzleyin
commonmark before 2.9.1 Denial of Service via SmartPunct and Attributes
YüksekCVSS 8,7İstismar yokEPSS %0thephpleague · commonmark7 Eyl 2026
- CVE-2026-8642834İzleyin
commonmark 1.5.0 before 2.10.0 Denial of Service via Attributes
YüksekCVSS 8,7İstismar yokEPSS %0thephpleague · commonmark7 Eyl 2026
- CVE-2026-8643034İzleyin
league/commonmark before 2.9.1 Denial of Service via parsing
YüksekCVSS 8,7İstismar yokEPSS %0thephpleague · commonmark7 Eyl 2026
- CVE-2021-3270833İzleyin
Time-of-check Time-of-use (TOCTOU) Race Condition in league/flysystem
YüksekCVSS 8,1Kavram kanıtıEPSS %3thephpleague · flysystem24 Haz 2021
- CVE-2023-3726030İzleyin
league/oauth2-server key exposed in exception message when passing as string and providing invalid pass phrase
YüksekCVSS 7,5İstismar yokEPSS %0thephpleague · oauth2-server6 Tem 2023
- CVE-2026-8643127İzleyin
commonmark before 2.9.1 XSS via AttributesExtension form feed bypass
OrtaCVSS 6,9İstismar yokEPSS %0thephpleague · commonmark7 Eyl 2026
- CVE-2018-2058325İzleyin
Cross-site scripting (XSS) vulnerability in the PHP League CommonMark library versions 0.15.6 through 0.18.x before 0.18.1 allows remote att
OrtaCVSS 6,1İstismar yokEPSS %1thephpleague · commonmark30 Ara 2018
- CVE-2026-3334725İzleyin
league/commonmark has an embed extension allowed_domains bypass
OrtaCVSS 6,3İstismar yokEPSS %0thephpleague · commonmark24 Mar 2026
- CVE-2019-1001024İzleyin
Cross-site scripting (XSS) vulnerability in the PHP League CommonMark library before 0.18.3 allows remote attackers to insert unsafe links i
OrtaCVSS 6,1İstismar yokEPSS %1thephpleague · commonmark24 Mar 2019
- CVE-2026-3083820İzleyin
league/commonmark: DisallowedRawHtml extension bypass via whitespace in HTML tag names
OrtaCVSS 5,1İstismar yokEPSS %0thephpleague · commonmark7 Mar 2026