Lucene search
+L

8 matches found

Github Security Blog
Github Security Blog
added 2026/07/20 9:32 p.m.8 views

Mistune inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs

Summary Type: Algorithmic-complexity DoS in core emphasis parsing. A long sequence of well-formed x strong or x strong-emphasis combined pairs causes ON² parser work. Distinct from the bracket-bomb DoS repetition and from the formatting-plugin DoS /==/^^; this one fires on default-config mistune...

7.5CVSS5.4AI score0.0041EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder