[HIGH] league/commonmark: Denial of service via distinctly-named attributes in the Attributes extension

PKSA-zyf5-hrxv-hrd7 GHSA-8rr7-cvq3-gmfh

Affected version: >=1.5.0,<2.10.0

Reported by:
GitHub