[MEDIUM] league/commonmark contains a XSS vulnerability in Attributes extension

PKSA-rqc2-tcc6-nc79 CVE-2025-46734 GHSA-3527-qv2q-pfvx

Affected package: league/commonmark

Affected version: <2.7.0

Reported by:
GitHub