<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime Advisory profiles</title><description>Plain-language Advisory profiles: what is vulnerable, what must be true for you to be affected, and how to check your own App.</description><link>https://agentprime.io/</link><item><title>league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scan</title><link>https://agentprime.io/advisories/GHSA-3q6v-r5mr-hxv8/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-3q6v-r5mr-hxv8/</guid><description>Affected: &gt;=2.0.0, &lt;2.10.2. You&apos;re only affected if: The App renders Markdown from untrusted input; The Table extension is added to the environment, directly or through GithubFlavoredMarkdownExtension / GithubFlavoredMarkdownConverter.</description><pubDate>Fri, 30 Oct 2026 12:00:00 GMT</pubDate><category>Packagist</category><category>league/commonmark</category></item><item><title>league/commonmark contains a XSS vulnerability in Attributes extension</title><link>https://agentprime.io/advisories/GHSA-3527-qv2q-pfvx/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-3527-qv2q-pfvx/</guid><description>Affected: &gt;=1.5.0, &lt;2.7.0. You&apos;re only affected if: The App renders Markdown from untrusted input; The Attributes extension is added to the environment.</description><pubDate>Fri, 30 Oct 2026 12:00:00 GMT</pubDate><category>Packagist</category><category>league/commonmark</category></item></channel></rss>