CVE-2026-86430 | PHP League Commonmark up to 2.9.0 Fenced Code Block Detection denial of service

A vulnerability, which was classified as problematic, has been found in PHP League Commonmark up to 2.9.0. This vulnerability affects unknown code of the component Fenced Code Block Detection/Reference Link Label Lookup/Emphasis Delimiter Processing. This manipulation causes denial of service.

The identification of this vulnerability is CVE-2026-86430. It is possible to initiate the attack remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More