https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 05 Nov 2026 21:45:48 +0000 https://db.gcve.eu/vuln/cve-2026-121437 <p><strong>Affected:</strong> lepture mistune</p> <p>Mistune from 3.3.0 before 3.3.4 contains a denial of service vulnerability that allows remote attackers to exhaust CPU through quadratic-time emphasis delimiter processing. Attackers can submit small markdown documents with repeated patterns like &#34;*a_b&#34; to trigger an O(n²) index-fixup loop, stalling workers for seconds.</p> <p><strong>Affected:</strong> lepture mistune</p> <p>Mistune from 3.3.0 before 3.3.4 contains a denial of service vulnerability that allows remote attackers to exhaust CPU through quadratic-time emphasis delimiter processing. Attackers can submit small markdown documents with repeated patterns like &#34;*a_b&#34; to trigger an O(n²) index-fixup loop, stalling workers for seconds.</p> https://db.gcve.eu/vuln/cve-2026-121437