CVE-2026-105829
6.1
/ 中危
2026-10-08
15h17 +00:00
15h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
League CommonMark from 1.3.0 before 2.10.2 contains a cross-site scripting vulnerability that allows users posting Markdown to bypass the DisallowedRawHtml extension by ending raw HTML with a bare disallowed tag name. Attackers can place a lone