Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
Weakness type CWE-86 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 1 | 1 | 0 |
█
2026-08 1
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2026-71478 | 6.1 | 10.3 | — | league/commonmark: AttributesExtension href/src unsafe-link filter bypass via embedded … |
| Vendor | CVEs |
|---|---|
| thephpleague | 1 |