CVE-2026-59922

Mistune (Python Markdown parser) contains a quadratic-time DoS in formatting.py for long runs of marker pairs (x , ==x==, ^^x^^) in the strikethrough/mark/insert plugins. The issue arises from scanning for matching markers from every possible start position, causing CPU exhaustion. It is fixed in...