https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-05T21:43:00.549479+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-121437 fkie_cve-2026-121437 2026-11-05T21:43:00.552489+00:00

Mistune from 3.3.0 before 3.3.4 contains a denial of service vulnerability that allows remote attackers to exhaust CPU through quadratic-time emphasis delimiter processing. Attackers can submit small markdown documents with repeated patterns like "*a_b" to trigger an O(n²) index-fixup loop, stalling workers for seconds.

 https://db.gcve.eu/vuln/ghsa-xr4w-hw52-gjv9 GHSA-xr4w-hw52-gjv9 2026-11-05T21:43:00.552555+00:00

Mistune from 3.3.0 before 3.3.4 contains a denial of service vulnerability that allows remote attackers to exhaust CPU through quadratic-time emphasis delimiter processing. Attackers can submit small markdown documents with repeated patterns like "*a_b" to trigger an O(n²) index-fixup loop, stalling workers for seconds.

 https://db.gcve.eu/vuln/ubuntu-cve-2026-121437 UBUNTU-CVE-2026-121437 2026-11-05T21:43:00.552576+00:00

Affected: Ubuntu:16.04:LTS: mistune, Ubuntu:18.04:LTS: mistune, Ubuntu:20.04:LTS: mistune, Ubuntu:22.04:LTS: mistune, Ubuntu:24.04:LTS: mistune, Ubuntu:26.10: mistune, Ubuntu:26.04:LTS: mistune

Mistune from 3.3.0 before 3.3.4 contains a denial of service vulnerability that allows remote attackers to exhaust CPU through quadratic-time emphasis delimiter processing. Attackers can submit small markdown documents with repeated patterns like "*a_b" to trigger an O(n²) index-fixup loop, stalling workers for seconds.