CVE-2026-121437

Mistune from 3.3.0 before 3.3.4 contains a denial of service vulnerability that allows remote attackers to exhaust CPU through quadratic-time emphasis delimiter processing. Attackers can submit small markdown documents with repeated patterns like "ab" to trigger an On² index-fixup loop, stalling...

CVE-2026-121437 Mistune 3.3.0 before 3.3.4 Quadratic-Time DoS via _process_emphasis_delimiters

Mistune from 3.3.0 before 3.3.4 contains a denial of service vulnerability that allows remote attackers to exhaust CPU through quadratic-time emphasis delimiter processing. Attackers can submit small markdown documents with repeated patterns like "ab" to trigger an On² index-fixup loop, stalling...

CVE-2026-121437 Mistune 3.3.0 before 3.3.4 Quadratic-Time DoS via _process_emphasis_delimiters

Mistune from 3.3.0 before 3.3.4 contains a denial of service vulnerability that allows remote attackers to exhaust CPU through quadratic-time emphasis delimiter processing. Attackers can submit small markdown documents with repeated patterns like "ab" to trigger an On² index-fixup loop, stalling...

CVE-2026-121437

Mistune versions 3.3.0 before 3.3.4 are vulnerable to a Denial of Service (DoS) attack due to a quadratic-time complexity issue in the _process_emphasis_delimiters function. Remote attackers can exhaust CPU resources by submitting small Markdown documents containing specific repeated patterns, su...

EUVD-2026-115859

Mistune from 3.3.0 before 3.3.4 contains a denial of service vulnerability that allows remote attackers to exhaust CPU through quadratic-time emphasis delimiter processing. Attackers can submit small markdown documents with repeated patterns like "ab" to trigger an On² index-fixup loop, stalling...

CVE-2026-121437: lepture mistune: Mistune from 3.3.0 before 3.3.4 contains a denial of service vulnerability that allows remote attackers to exhaust CPU…

Mistune from 3.3.0 before 3.3.4 contains a denial of service vulnerability that allows remote attackers to exhaust CPU through quadratic-time emphasis delimiter processing. Attackers can submit small markdown documents with repeated patterns like "ab" to trigger an On² index-fixup loop, stalling...

openSUSE 16 Security Update : python-Django (openSUSE-SU-2026:22196-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22196-1 advisory. Changes in python-Django: - CVE-2026-87975: an authenticated user permitted to submit a formset to delete rows outside the limiting queryset,...

SUSE CVE-2026-119197

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, binary REAL decoding builds a large mantissa one octet at a time by shifting a growing integer and slicing the remaining byte string. Attacker-controlled ASN.1 includes a binary-encoded REAL with a large mantissa and reaches BER, CER, ...

joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service

Summary Joi.string.email multiple: true takes quadratic time to split a value that contains a long run of whitespace. One request with 100 KB of spaces blocks the Node.js event loop for several seconds, which causes a denial of service. Details When the multiple option is set, the email rule spli...

GHSA-4528-X5FX-H6HG joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service

Summary Joi.string.email multiple: true takes quadratic time to split a value that contains a long run of whitespace. One request with 100 KB of spaces blocks the Node.js event loop for several seconds, which causes a denial of service. Details When the multiple option is set, the email rule spli...

npm: joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service

npm: joi: quadratic-time split in string.email multiple: true allows denial of service vulnerability discovered by ? in WordPress npm joi versions = 17.1.1, 17.13.9...

GHSA-8494-F6MR-CJPV @hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of service

Summary Content.disposition takes quadratic time when a Content-Disposition parameter contains a long token without =. One unauthenticated multipart request can block the Node.js event loop for several minutes. Details Content.disposition reads the parameters with a global regular expression in...

npm: @hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of service

npm: @hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of service vulnerability discovered by ? in WordPress npm content versions = 3.0.6, = 4.0.6...

CVE-2026-119202

The @hapi/content library (versions 3.0.6 through 6.0.3) is vulnerable to a Denial of Service (DoS) attack due to quadratic-time parsing in the Content.disposition() function. The root cause is an unanchored parameter-name expression used in a global regular-expression scan, which triggers repeat...

CVE-2026-119202 @hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of service

@hapi/content provides HTTP Content- header parsing. From 3.0.6 until 6.0.3, Content.disposition uses an unanchored parameter-name expression in a global regular-expression scan, causing repeated failed matching over the remaining input when a Content-Disposition parameter contains a long token...

CVE-2026-119202 @hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of service

@hapi/content provides HTTP Content- header parsing. From 3.0.6 until 6.0.3, Content.disposition uses an unanchored parameter-name expression in a global regular-expression scan, causing repeated failed matching over the remaining input when a Content-Disposition parameter contains a long token...

CVE-2026-119197

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, binary REAL decoding builds a large mantissa one octet at a time by shifting a growing integer and slicing the remaining byte string. Attacker-controlled ASN.1 includes a binary-encoded REAL with a large mantissa and reaches BER, CER, ...

CVE-2026-119197: pyasn1: pyasn1 is a generic ASN.1 library for Python

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, binary REAL decoding builds a large mantissa one octet at a time by shifting a growing integer and slicing the remaining byte string. Attacker-controlled ASN.1 includes a binary-encoded REAL with a large mantissa and reaches BER, CER, ...

GHSA-GG6H-894W-4M9C RE2JS: Quadratic-time denial of service in re2js lookbehind matching

Summary Using the opt-in LOOKBEHINDS flag together with any repeated-matching API matcher.find in a loop, matchAll, split, matcher.replaceAll causes quadratic-time Θn² matching, contradicting the library's own "linear time matching" guarantee. A single call with a 16,000-character input takes...

PT-2026-123482

Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow takes quadratic time to reserve PDF object identifiers when saving many frames with save all enabled. PdfParser.next object id repeatedly rebuilds and scans all previously reserved identifiers for every object. An attacker can...