SUSE CVE-2026-121438

Mistune before 3.3.3 contains a denial of service vulnerability in InlineParser.parselink that allows attackers to cause quadratic CPU growth by supplying balanced nested brackets. Attackers can submit crafted Markdown with thousands of nested bracket pairs not forming a valid link, triggering...

CVE-2026-121438

Mistune before 3.3.3 contains a denial of service vulnerability in InlineParser.parselink that allows attackers to cause quadratic CPU growth by supplying balanced nested brackets. Attackers can submit crafted Markdown with thousands of nested bracket pairs not forming a valid link, triggering...

CVE-2026-121438

The Mistune markdown library versions before 3.3.3 is vulnerable to a Denial of Service (DoS) condition in the InlineParser.parse_link function. The root cause is quadratic CPU growth triggered when parsing crafted Markdown containing thousands of balanced nested brackets that do not form valid l...

EUVD-2026-115860

Mistune before 3.3.3 contains a denial of service vulnerability in InlineParser.parselink that allows attackers to cause quadratic CPU growth by supplying balanced nested brackets. Attackers can submit crafted Markdown with thousands of nested bracket pairs not forming a valid link, triggering...

CVE-2026-121438: lepture mistune: Mistune before 3.3.3 contains a denial of service vulnerability in InlineParser.parse_link that allows attackers to…

Mistune before 3.3.3 contains a denial of service vulnerability in InlineParser.parselink that allows attackers to cause quadratic CPU growth by supplying balanced nested brackets. Attackers can submit crafted Markdown with thousands of nested bracket pairs not forming a valid link, triggering...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the integer parsing logic in lib/parser.js and src/toml.pegjs, where BigInt conversion of oversized integer literals exhibits super-linear CPU growth relative to digit count. An...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the integer parsing logic in lib/parser.js and src/toml.pegjs, where BigInt conversion of oversized integer literals exhibits super-linear CPU growth relative to digit count. An...

EUVD-2026-70242

HTTPX2: Quadratic SSE line buffering can cause CPU denial of service...

CVE-2026-42391

An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in, which causes memory and CPU usage to grow disproportionately. The login process can be terminated by the out-of-memory handling, which also terminates all other connections handled by...

Inefficient Algorithmic Complexity

Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the readblock method of TEICorpusView nltk/corpus/reader/pl196x.py, whose lazy .? whole-block regexes...