league/commonmark's AttributesListener::findTargetAndDirection() used continue where it should have stopped walking, so once an AttributesInline node could no longer select a sibling it re-scanned all remaining siblings on every iteration. Documents containing long runs of adjacent inline attribute blocks were therefore resolved in quadratic time, which can be abused for denial of service. Fixed in 2.9.0 by breaking out of the walk and targeting the parent node.