https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-27T13:38:35.667157+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-115349 CVE-2026-115349 — Mistune 3.0.0 before 3.3.0 Denial of Service via Nested Bracket Parsing 2026-10-27T13:38:35.668155+00:00

Affected: lepture mistune

Mistune from 3.0.0 before 3.3.0 contains an algorithmic complexity denial of service vulnerability in the parse_link_text function in src/mistune/helpers.py. Attackers can submit markdown with deeply nested square brackets triggering quadratic parsing time, exhausting server CPU with small crafted requests.