EUVD-2026-112495

python-markdown2 through 2.5.5 contains a denial of service vulnerability that allows remote users to exhaust CPU by submitting Markdown with unclosed inline link destinations. Attackers can submit repeated 'a' or '!a' sequences, causing findbalanced to rescan the remaining document for each link...

CVE-2026-118694

The python-markdown2 library (versions through 2.5.5 ) is vulnerable to a Denial of Service (DoS) attack due to an Inefficient Algorithmic Complexity (CWE-407) flaw. A remote user can exhaust CPU resources by submitting Markdown containing repeated unclosed inline link sequences, such as [a]( or ...