[HIGH] league/commonmark: Denial of service in the SmartPunct and Attributes extensions

PKSA-nv44-1b4d-6gjg GHSA-jjv6-8j6v-6j52

Affected package: league/commonmark

Affected version: >=1.5.0,<2.9.1

Reported by:
GitHub