THREAT OPS › Threat News › [GHSA] GHSA-jfm3-95jq-q3rf (high) — league/commonmark: Denial of service via duplicate footnote definitions
[GHSA] GHSA-jfm3-95jq-q3rf (high) — league/commonmark: Denial of service via duplicate footnote definitions
GHSA-jfm3-95jq-q3rf Severity: high CVE: None
league/commonmark: Denial of service via duplicate footnote definitions
### Impact
The Footnote extension records one backref per footnote *reference* and then appends the **entire** backref list for **every** footnote *definition* block in the document, without ever de-duplicating or removing repeated definitions of the same label (`GatherFootnotes
Original source: https://github.com/advisories/GHSA-jfm3-95jq-q3rf