Most recent entries from all

certfr-2026-avi-1094 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2026-avi-1094

CLEANSTART-2026-VG66348 — Security fix for CVE-2026-48801 applied in: argo-workflows 3.6.19-r7, argo-workflows 3.7.15-r3

Affected: CleanStart: argo-workflows

CVE-2026-48801 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

EUVD-2026-337881

fkie_cve-2026-48801

linkify-it is a links recognition library with full Unicode support. Prior to 5.0.1, LinkifyIt.prototype.match, the package's primary public API, has O(N²) algorithmic complexity for inputs containing many fuzzy links or emails because the JavaScript-level scan loop re-slices input and re-runs unanchored regex searches on progressively shorter tails. Any service that synchronously renders untrusted Markdown with linkify:true on a request hot path can inherit a worker-process denial of service triggerable by a tens-of-KB request body. This issue is fixed in version 5.0.1.

GHSA-22p9-wv53-3rq4 — LinkifyIt#match scan loop has quadratic algorithmic complexity

Affected: npm: linkify-it

## Summary

`LinkifyIt.prototype.match` — the package's primary public API — has **O(N²) algorithmic complexity** for inputs containing many fuzzy links or emails. This is not a regex backtrack bug; it's a structural issue in the JS-level scan loop that re-slices the input and re-runs unanchored regex searches on progressively shorter tails, N times.

64 KB of `"a@b.com\n"` repeated burns ~2.5 s of single-threaded CPU; 128 KB takes ~10 s. Doubling the input quadruples the time — textbook O(N²).

The same cost passes through `markdown-it` (`linkify:true`) unmodified. Any service that synchronously renders untrusted Markdown with linkify enabled on a request hot-path (forums, comments, chat, wikis, AI chat UIs) inherits a worker-process DoS triggerable by a tens-of-KB request body.

## Affected component

- HEAD audited: `8e887d5bace3f5b09b1d1f70492fa0364ef1793d` (v5.0.0) - Vulnerable function: `LinkifyIt.prototype.match` — `index.mjs:528-554` - Re-scan call sites inside `test()`: `index.mjs:444` (fuzzy host search), `:448` (fuzzy link match), `:467` (fuzzy email match) - Transitive consumer: `markdown-it` (~21.6M weekly npm DLs) calls `linkify.match()` at `lib/rules_core/linkify.mjs:57` when `linkify:true` - **All versions affected** — the vulnerable loop exists since the initial commit (2014) through v5.0.0

## Vulnerability details

### The O(N²) outer loop

`index.mjs:528-554`:

```js LinkifyIt.prototype.match = function match (text) { const result = [] let shift = 0…

NCSC-2026-0325 — Kwetsbaarheden verholpen in Atlassian producten

NCSC-2026-0325

RHSA-2026:38187 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

linkify-it: linkify-it: Denial of Service via algorithmic complexity vulnerability js-yaml: js-yaml: Denial of Service via crafted YAML documents

UBUNTU-CVE-2026-48801

Affected: Ubuntu:22.04:LTS: node-markdown-it, Ubuntu:24.04:LTS: node-markdown-it, Ubuntu:26.04:LTS: node-markdown-it

WID-SEC-W-2026-2452 — Red Hat Ansible Automation Platform (node-tar, linkify-it, protobufjs, brace-expansion, fast-uri, DOMPurify): Mehrere S…

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Ansible Automation Platform ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, einen Denial-of-Service-Zustand auszulösen oder beliebigen Code auszuführen.