[GHSA] GHSA-g2gp-3wwq-f4ph (high) — league/commonmark: Denial of service via adjacent inline attribute blocks

GHSA-g2gp-3wwq-f4ph Severity: high CVE: None

league/commonmark: Denial of service via adjacent inline attribute blocks

### Impact

With the Attributes extension enabled, `AttributesListener::findTargetAndDirection()` resolves each attribute node's target by walking outward through its siblings. For a run of N adjacent inline attribute blocks placed at the start of a block (with nothing to their