HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-105830 — league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of s...

·Source: NIST NVD

Updated:

Executive Summary

league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table extension's TableStartParser::tryStart() block-start scan. Unauthenticated attackers can submit a large paragraph of pipe-free lines not starting with letters, forcing repeated full-buffer strpos scans that exhaust PHP worker CPU.

Analysis

league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table extension's TableStartParser::tryStart() block-start scan. Unauthenticated attackers can submit a large paragraph of pipe-free lines not starting with letters, forcing repeated full-buffer strpos scans that exhaust PHP worker CPU. CVSS Score: 7.5. Published: 2026-10-08T15:17:35.340.

Indicators of Compromise (1)

CVE (1)
CVE-2026-105830
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 8, 2026. Verified by: NIST.

Related Threats

LOWVulnerabilityNEW

Fintechs top banks and stablecoins for cheap cross-border payment - BIS research

Cross-border payments remain slow and expensive but fintech outfits such as Wise and Remitly have substantially cut costs relative to traditional retail bank wires while stabelcoins still suffer from issues with friction, according to BIS research.

Finextra
MEDIUMVulnerability

More and More Cyber Jobs Require AI Expertise

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/more-more-cyber-jobs-require-ai-expertise-image_small-2-a-33170.jpg" align=right hspace=4><b>But There's No Consensus Way to Assess Levels of Skill</b><br>A growing number of cybersecurity jobs require not just a baseline familiarity with AI tools, but significant AI expertise, according to an analysis of validated job vacancies i

Bank Info Security
MEDIUMVulnerability

New Acronis CEO Seeks MSP Growth Through Platform Expansion

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/new-acronis-ceo-seeks-msp-growth-through-platform-expansion-image_small-6-a-33168.jpg" align=right hspace=4><b>Company Looks to Extend Its Cyber Resilience Roots Into Managed Detection Services</b><br>Former WatchGuard CEO Prakash Panjwani is leading Acronis' push to consolidate MSP security spending through open MDR and XDR integ

Bank Info Security