All, When I was profiling performance diffs between 3.x and 4.x, I stumbled across a potential DoS in commonmark-java. I then had Claude look for others. We found six DoS opportunities in total. Robin fixed them very quickly. The announcements were just made public. There have been two other DoS which Robin has also fixed.
https://github.com/commonmark/commonmark-java/security/advisories Cheers, Tim
