medium5.3
CVE-2026-86432
commonmark versions from 2.0.0 before 2.8.4 contain a denial of service vulnerability in XmlRenderer that emits depth-proportional indentation for every XML ta…
Impact
commonmark versions from 2.0.0 before 2.8.4 contain a denial of service vulnerability in XmlRenderer that emits depth-proportional indentation for every XML tag. Attackers can provide deeply nested Markdown or AST structures to cause quadratic memory consumption and output amplification, exhausting server resources.
Affected products
| Product | Affected versions |
|---|---|
| Commonmark Versions From 2.0.0 | before 2.8.4 |
Versions were read from the advisory text. No structured product data has been published for this record yet.