Lucene search
+L

12 matches found

Github Security Blog
Github Security Blog
•added 2026/07/20 9:32 p.m.•18 views

Mistune inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs

Summary Type: Algorithmic-complexity DoS in core emphasis parsing. A long sequence of well-formed x strong or x strong-emphasis combined pairs causes ON² parser work. Distinct from the bracket-bomb DoS repetition and from the formatting-plugin DoS /==/^^; this one fires on default-config mistune...

7.5CVSS5.4AI score0.00644EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder