Commonmark Before 2.9.1 Denial Of Service Via Smartpunct And Attributes

Back www.vulncheck.com

Commonmark Before 2.9.1 Denial Of Service Via Smartpunct And Attributes

www.vulncheck.com • September 8, 2026

Share: View original

Vulnerability Prioritization Prioritize vulnerabilities that matter based on the threat landscape and defer vulnerabilities that don't.

Early Warning System Real-time alerting of changes in the vulnerability landscape so that you can take action before the attacks start.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Commonmark Denial of Service Vulnerabilities Disclosed A series of denial of service vulnerabilities affecting various versions of Commonmark have been disclosed. The vulnerabilities impact versions prior to 2.9.1, 2.8.4, and 2.10.0, as well as 2.0.0 through 2.8.3. Attack vectors include issues with smartpunct, attributes, footnotes, and slug collisions. The vulnerabilities could allow attackers to disrupt service availability. Affected systems include those utilizing Commonmark for parsing markdown content. Currently, there are no reports of active exploitation in the wild. Security professionals are advised to prioritize patching these vulnerabilities based on their threat landscape. The vulnerabilities have been documented in multiple advisories published on the same day. 45

Extracted Entities

Attack Types (1)

CWE Weaknesses (1)

CWE-400 - Uncontrolled Resource Consumption

Vulnerabilities (1)

Commonmark Before 2.9.1 Denial Of Service Via Smartpunct And Attributes