https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 11:23:41 +0000 https://cve.radiocsirt.org/vuln/brew-adr-viewer-cve-2026-59922 <p><strong>Affected:</strong> Homebrew: adr-viewer</p> <p>## Summary</p> <p>**Type:** Algorithmic-complexity denial of service. A run of N closed pairs `~~x~~~~x~~...` (or the analogous `==x==` for `mark`, `^^x^^` for `insert`) causes O(N²) work in the formatting parser. With the `strikethrough`, `mark`, or `insert` plugin enabled, an 8 KB input pegs the CPU for ~4 seconds; 16 KB → ~17 seconds. **File:** `src/mistune/plugins/formatting.py`, lines 13-15 (the `_STRIKE_END` / `_MARK_END` / `_INSERT_END` patterns and their per-position scan). **Root cause:** for each opening `~~`/`==`/`^^` the parser scans forward for the matching close pattern. The scan itself uses a bounded regex, but the parser tries the close-scan at every potential start position. For input shaped like `~~x~~` repeated N times, every `~~` is examined as a possible start, each scan covers up to the end of input. Total work is O(N²). Default config without these plugins handles the same input in linear time (4 ms for 4000 reps), confirming the cost is in the formatting plugin&#39;s per-marker scan, not in core parsing.</p> <p>## Affected Code</p> <p>**File:** `src/mistune/plugins/formatting.py`, lines 12-16.</p> <p>```python _STRIKE_END = re.compile(r&#34;(?:&#34; + PREVENT_BACKSLASH + r&#34;\\~|[^\s~])~~(?!~)&#34;) _MARK_END = re.compile(r&#34;(?:&#34; + PREVENT_BACKSLASH + r&#34;\\=|[^\s=])==(?!=)&#34;) _INSERT_END = re.compile(r&#34;(?:&#34; + PREVENT_BACKSLASH + r&#34;\\\^|[^\s^])\^\^(?!\^)&#34;) # Each pattern is scanned forward from every start position fired by the # corresponding inline rule. The end-pattern itself is bounded; the…</p> <p><strong>Affected:</strong> Homebrew: adr-viewer</p> <p>## Summary</p> <p>**Type:** Algorithmic-complexity denial of service. A run of N closed pairs `~~x~~~~x~~...` (or the analogous `==x==` for `mark`, `^^x^^` for `insert`) causes O(N²) work in the formatting parser. With the `strikethrough`, `mark`, or `insert` plugin enabled, an 8 KB input pegs the CPU for ~4 seconds; 16 KB → ~17 seconds. **File:** `src/mistune/plugins/formatting.py`, lines 13-15 (the `_STRIKE_END` / `_MARK_END` / `_INSERT_END` patterns and their per-position scan). **Root cause:** for each opening `~~`/`==`/`^^` the parser scans forward for the matching close pattern. The scan itself uses a bounded regex, but the parser tries the close-scan at every potential start position. For input shaped like `~~x~~` repeated N times, every `~~` is examined as a possible start, each scan covers up to the end of input. Total work is O(N²). Default config without these plugins handles the same input in linear time (4 ms for 4000 reps), confirming the cost is in the formatting plugin&#39;s per-marker scan, not in core parsing.</p> <p>## Affected Code</p> <p>**File:** `src/mistune/plugins/formatting.py`, lines 12-16.</p> <p>```python _STRIKE_END = re.compile(r&#34;(?:&#34; + PREVENT_BACKSLASH + r&#34;\\~|[^\s~])~~(?!~)&#34;) _MARK_END = re.compile(r&#34;(?:&#34; + PREVENT_BACKSLASH + r&#34;\\=|[^\s=])==(?!=)&#34;) _INSERT_END = re.compile(r&#34;(?:&#34; + PREVENT_BACKSLASH + r&#34;\\\^|[^\s^])\^\^(?!\^)&#34;) # Each pattern is scanned forward from every start position fired by the # corresponding inline rule. The end-pattern itself is bounded; the…</p> https://cve.radiocsirt.org/vuln/brew-adr-viewer-cve-2026-59922 https://cve.radiocsirt.org/vuln/euvd-2026-335363 EUVD-2026-335363 https://cve.radiocsirt.org/vuln/euvd-2026-335363 https://cve.radiocsirt.org/vuln/fkie_cve-2026-59922 <p>Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a run of closed tilde, equals-sign, or caret marker pairs around a character causes quadratic work in src/mistune/plugins/formatting.py when the strikethrough, mark, or insert plugin scans for matching markers from each possible start position, allowing denial of service through CPU exhaustion. This issue is fixed in version 3.3.0.</p> <p>Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a run of closed tilde, equals-sign, or caret marker pairs around a character causes quadratic work in src/mistune/plugins/formatting.py when the strikethrough, mark, or insert plugin scans for matching markers from each possible start position, allowing denial of service through CPU exhaustion. This issue is fixed in version 3.3.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-59922 https://cve.radiocsirt.org/vuln/ghsa-c8j7-8cv4-2xmq <p><strong>Affected:</strong> PyPI: mistune</p> <p>## Summary</p> <p>**Type:** Algorithmic-complexity denial of service. A run of N closed pairs `~~x~~~~x~~...` (or the analogous `==x==` for `mark`, `^^x^^` for `insert`) causes O(N²) work in the formatting parser. With the `strikethrough`, `mark`, or `insert` plugin enabled, an 8 KB input pegs the CPU for ~4 seconds; 16 KB → ~17 seconds. **File:** `src/mistune/plugins/formatting.py`, lines 13-15 (the `_STRIKE_END` / `_MARK_END` / `_INSERT_END` patterns and their per-position scan). **Root cause:** for each opening `~~`/`==`/`^^` the parser scans forward for the matching close pattern. The scan itself uses a bounded regex, but the parser tries the close-scan at every potential start position. For input shaped like `~~x~~` repeated N times, every `~~` is examined as a possible start, each scan covers up to the end of input. Total work is O(N²). Default config without these plugins handles the same input in linear time (4 ms for 4000 reps), confirming the cost is in the formatting plugin&#39;s per-marker scan, not in core parsing.</p> <p>## Affected Code</p> <p>**File:** `src/mistune/plugins/formatting.py`, lines 12-16.</p> <p>```python _STRIKE_END = re.compile(r&#34;(?:&#34; + PREVENT_BACKSLASH + r&#34;\\~|[^\s~])~~(?!~)&#34;) _MARK_END = re.compile(r&#34;(?:&#34; + PREVENT_BACKSLASH + r&#34;\\=|[^\s=])==(?!=)&#34;) _INSERT_END = re.compile(r&#34;(?:&#34; + PREVENT_BACKSLASH + r&#34;\\\^|[^\s^])\^\^(?!\^)&#34;) # Each pattern is scanned forward from every start position fired by the # corresponding inline rule. The end-pattern itself is bounded; the…</p> <p><strong>Affected:</strong> PyPI: mistune</p> <p>## Summary</p> <p>**Type:** Algorithmic-complexity denial of service. A run of N closed pairs `~~x~~~~x~~...` (or the analogous `==x==` for `mark`, `^^x^^` for `insert`) causes O(N²) work in the formatting parser. With the `strikethrough`, `mark`, or `insert` plugin enabled, an 8 KB input pegs the CPU for ~4 seconds; 16 KB → ~17 seconds. **File:** `src/mistune/plugins/formatting.py`, lines 13-15 (the `_STRIKE_END` / `_MARK_END` / `_INSERT_END` patterns and their per-position scan). **Root cause:** for each opening `~~`/`==`/`^^` the parser scans forward for the matching close pattern. The scan itself uses a bounded regex, but the parser tries the close-scan at every potential start position. For input shaped like `~~x~~` repeated N times, every `~~` is examined as a possible start, each scan covers up to the end of input. Total work is O(N²). Default config without these plugins handles the same input in linear time (4 ms for 4000 reps), confirming the cost is in the formatting plugin&#39;s per-marker scan, not in core parsing.</p> <p>## Affected Code</p> <p>**File:** `src/mistune/plugins/formatting.py`, lines 12-16.</p> <p>```python _STRIKE_END = re.compile(r&#34;(?:&#34; + PREVENT_BACKSLASH + r&#34;\\~|[^\s~])~~(?!~)&#34;) _MARK_END = re.compile(r&#34;(?:&#34; + PREVENT_BACKSLASH + r&#34;\\=|[^\s=])==(?!=)&#34;) _INSERT_END = re.compile(r&#34;(?:&#34; + PREVENT_BACKSLASH + r&#34;\\\^|[^\s^])\^\^(?!\^)&#34;) # Each pattern is scanned forward from every start position fired by the # corresponding inline rule. The end-pattern itself is bounded; the…</p> https://cve.radiocsirt.org/vuln/ghsa-c8j7-8cv4-2xmq https://cve.radiocsirt.org/vuln/msrc_cve-2026-59922 msrc_CVE-2026-59922 https://cve.radiocsirt.org/vuln/msrc_cve-2026-59922 https://cve.radiocsirt.org/vuln/opensuse-su-2026:21339-1 <p>Security update for python-mistune</p> <p>Security update for python-mistune</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:21339-1 https://cve.radiocsirt.org/vuln/pysec-2026-2210 <p><strong>Affected:</strong> PyPI: mistune</p> <p>Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a run of closed tilde, equals-sign, or caret marker pairs around a character causes quadratic work in src/mistune/plugins/formatting.py when the strikethrough, mark, or insert plugin scans for matching markers from each possible start position, allowing denial of service through CPU exhaustion. This issue is fixed in version 3.3.0.</p> <p><strong>Affected:</strong> PyPI: mistune</p> <p>Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a run of closed tilde, equals-sign, or caret marker pairs around a character causes quadratic work in src/mistune/plugins/formatting.py when the strikethrough, mark, or insert plugin scans for matching markers from each possible start position, allowing denial of service through CPU exhaustion. This issue is fixed in version 3.3.0.</p> https://cve.radiocsirt.org/vuln/pysec-2026-2210 https://cve.radiocsirt.org/vuln/suse-su-2026:22655-1 <p>Security update for python-mistune</p> <p>Security update for python-mistune</p> https://cve.radiocsirt.org/vuln/suse-su-2026:22655-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-59922 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: mistune, Ubuntu:18.04:LTS: mistune, Ubuntu:20.04:LTS: mistune, Ubuntu:22.04:LTS: mistune, Ubuntu:24.04:LTS: mistune, Ubuntu:25.10: mistune, Ubuntu:26.04:LTS: mistune</p> <p>Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a run of closed tilde, equals-sign, or caret marker pairs around a character causes quadratic work in src/mistune/plugins/formatting.py when the strikethrough, mark, or insert plugin scans for matching markers from each possible start position, allowing denial of service through CPU exhaustion. This issue is fixed in version 3.3.0.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: mistune, Ubuntu:18.04:LTS: mistune, Ubuntu:20.04:LTS: mistune, Ubuntu:22.04:LTS: mistune, Ubuntu:24.04:LTS: mistune, Ubuntu:25.10: mistune, Ubuntu:26.04:LTS: mistune</p> <p>Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a run of closed tilde, equals-sign, or caret marker pairs around a character causes quadratic work in src/mistune/plugins/formatting.py when the strikethrough, mark, or insert plugin scans for matching markers from each possible start position, allowing denial of service through CPU exhaustion. This issue is fixed in version 3.3.0.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-59922