CVE-2026-59928

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a Markdown document containing many repeated or distinct reference-link definitions causes quadratic work in src/mistune/blockparser.py and the reflinks environment dictionary handling, allowing denial of service...

PT-2026-38088

Name of the Vulnerable Software and Affected Versions Mistune versions 3.0.0a1 through 3.2.0 Description A Regular Expression Denial of Service ReDoS exists in the LINK TITLE RE regular expression. An attacker can provide specially crafted Markdown for parsing that triggers catastrophic...

The vulnerability of the FileHandler component in the Google Chrome browser for the ChromeOS operating system allows a hacker to compromise the confidentiality and integrity of information.

The vulnerability of the FileHandler component in Google Chrome’s browser for the ChromeOS operating system is related to an improper definition of links before accessing the file. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of...

The vulnerability of the zarafa-autorespond application, which is part of the Zarafa Collaboration Platform, allows a perpetrator to increase their privileges.

The vulnerability of the zarafa-autorespond application, which is part of the Zarafa Collaboration Platform, is related to incorrect definition of links before accessing a file. Exploiting this vulnerability can allow an attacker, operating locally, to increase their privileges by manipulating...