CVE-2026-59925 affecting package python-mistune for versions less than 3.3.0-1

CVE-2026-59925 affecting package python-mistune for versions less than 3.3.0-1. A patched version of the package is available...

CVE-2026-59926 affecting package python-mistune for versions less than 3.3.0-1

CVE-2026-59926 affecting package python-mistune for versions less than 3.3.0-1. A patched version of the package is available...

CVE-2026-49851 affecting package python-mistune for versions less than 3.3.0-1

CVE-2026-49851 affecting package python-mistune for versions less than 3.3.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-59922 affecting package python-mistune for versions less than 3.3.0-1

CVE-2026-59922 affecting package python-mistune for versions less than 3.3.0-1. A patched version of the package is available...

CVE-2026-59928 affecting package python-mistune for versions less than 3.3.0-1

CVE-2026-59928 affecting package python-mistune for versions less than 3.3.0-1. A patched version of the package is available...

Important Photon OS Security Update - PHSA-2026-5.0-0911

Updates of 'rubygem-nokogiri', 'rubygem-faraday', 'python3-mistune', 'python3-urllib3' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-92-0911

Updates of 'python3-urllib3', 'python3-mistune' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-91-0911

Updates of 'rubygem-faraday', 'python3-urllib3', 'rubygem-nokogiri', 'python3-mistune' packages of Photon OS have been released...

SUSE-SU-2026:22495-1 Security update for python-mistune

This update for python-mistune fixes the following issue - CVE-2026-49851: potential DoS via quadratic-time parsing in parselinktext bsc1269091...

OPENSUSE-SU-2026:21191-1 Security update for python-mistune

This update for python-mistune fixes the following issue - CVE-2026-49851: potential DoS via quadratic-time parsing in parselinktext bsc1269091...

[SECURITY] Fedora 43 Update: python-mistune-3.2.1-1.fc43

The fastest markdown parser in pure Python, inspired by marked...

[SECURITY] Fedora 44 Update: python-mistune-3.2.1-1.fc44

The fastest markdown parser in pure Python, inspired by marked...

Fedora 43 : python-mistune (2026-c52d83db89)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c52d83db89 advisory. Security fix for CVE-2026-44898 by updating to 3.2.1. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 44 : python-mistune (2026-3b027683d8)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3b027683d8 advisory. Security fix for CVE-2026-44898 by updating to 3.2.1. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Mistune: Potential DoS via quadratic-time parsing in parse_link_text

...

CVE-2026-49851

A flaw was found in Mistune, a Python Markdown parser. A remote attacker can exploit this vulnerability by providing a specially crafted Markdown input containing many consecutive bracket characters. This can lead to excessive CPU usage, causing a denial-of-service DoS condition on the affected...

Linux Distros Unpatched Vulnerability : CVE-2026-49851

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, Mistune is vulnerable to a CPU exhaustion DoS due to superlinear approximately O...

ai-shell (>=0.1.0, <=1.0.4), airut (>=0.25.5, <=0.27.0) +141 more potentially affected by CVE-2026-49851 via mistune (>=3.0.0rc5, <=3.2.1)

mistune PYPI version =3.0.0rc5, =0.1.0, =0.25.5, =0.9.5, =3.0.0rc3, =3.2.1b1, =1.0.1, =1.0.1, =0.1.0, =0.0.1, =0.1.0, =0.0.2, =1.0.0.1, =0.0.1, =0.1.10, =0.1.20 and more Source cves: CVE-2026-49851 Source advisory: SNYK:PYTHON-MISTUNE-17458804...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the parselinktext function of mistune/inlineparser.py, which performs a regex search inside a loop that advances one character at a time when parsing fails, producing On² behavior...

AZL-91047 CVE-2026-49851 affecting package python-mistune for versions less than 3.3.0-1

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, Mistune is vulnerable to a CPU exhaustion DoS due to superlinear approximately On² behavior in parselinktext. When parsing Markdown containing many consecutive characters, parselinktext repeatedly scans the input usin...