https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 05 Nov 2026 02:57:02 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-121437 <p>Mistune from 3.3.0 before 3.3.4 contains a denial of service vulnerability that allows remote attackers to exhaust CPU through quadratic-time emphasis delimiter processing. Attackers can submit small markdown documents with repeated patterns like &#34;*a_b&#34; to trigger an O(n²) index-fixup loop, stalling workers for seconds.</p> <p>Mistune from 3.3.0 before 3.3.4 contains a denial of service vulnerability that allows remote attackers to exhaust CPU through quadratic-time emphasis delimiter processing. Attackers can submit small markdown documents with repeated patterns like &#34;*a_b&#34; to trigger an O(n²) index-fixup loop, stalling workers for seconds.</p> https://db.gcve.eu/vuln/fkie_cve-2026-121437 https://db.gcve.eu/vuln/ghsa-xr4w-hw52-gjv9 <p>Mistune from 3.3.0 before 3.3.4 contains a denial of service vulnerability that allows remote attackers to exhaust CPU through quadratic-time emphasis delimiter processing. Attackers can submit small markdown documents with repeated patterns like &#34;*a_b&#34; to trigger an O(n²) index-fixup loop, stalling workers for seconds.</p> <p>Mistune from 3.3.0 before 3.3.4 contains a denial of service vulnerability that allows remote attackers to exhaust CPU through quadratic-time emphasis delimiter processing. Attackers can submit small markdown documents with repeated patterns like &#34;*a_b&#34; to trigger an O(n²) index-fixup loop, stalling workers for seconds.</p> https://db.gcve.eu/vuln/ghsa-xr4w-hw52-gjv9