ROOT-APP-NPM-CVE-2026-59887 CVE-2026-59887 in linkify-it - Patched by Root

Root has patched CVE-2026-59887 in the linkify-it package for Root:npm. Multiple fixed versions available...

MGASA-2026-0377 Updated python-linkify-it-py package fixes security vulnerabilities

LinkifyIt.match was quadratic on untrusted input when linkify is enabled GHSA-8m2q-wq3r-6hq8. Fix quadratic complexity in LinkifyIt.match, port of linkify-it 5.0.1 and 5.0.2 upstream CVE-2026-48801, CVE-2026-59887 82 Match validators at a position instead of slicing the tail, needed because Pytho...

Updated python-linkify-it-py package fixes security vulnerabilities

LinkifyIt.match was quadratic on untrusted input when linkify is enabled GHSA-8m2q-wq3r-6hq8. Fix quadratic complexity in LinkifyIt.match, port of linkify-it 5.0.1 and 5.0.2 upstream CVE-2026-48801, CVE-2026-59887 82 Match validators at a position instead of slicing the tail, needed because Pytho...

DoS (Denial of Service) linkify-it Dependency in Jira Service Management Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 11.1.0, 11.2.0, and 11.3.0 of Jira Service Management Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an...

Fedora 44 : python-linkify-it-py (2026-7c23b06d74)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7c23b06d74 advisory. Security release: LinkifyIt.match was quadratic on untrusted input when linkify is enabled GHSA-8m2q-wq3r-6hq8. - Fix quadratic complexity in...

linkify-it: linkify-it: Denial of Service via algorithmic complexity vulnerability

A flaw was found in linkify-it, a library for recognizing links with full Unicode support. The LinkifyIt.prototype.match function, the package's primary public API, has an algorithmic complexity of ON² for inputs containing many fuzzy links or emails. This can be exploited by a remote attacker...

CVE-2026-59887

A flaw was found in linkify-it, a library for recognizing links. A remote attacker could exploit this vulnerability by providing specially crafted user text. The mailto: schema validator, when processing this input, can be repeatedly invoked, leading to excessive CPU consumption. This can result ...

Security Bulletin: linkify-it-5.0.1.tgz security vulnerability in Content Cortex(CCx) reported for GenAI ICN Plugin

Summary linkify-it-5.0.1.tgz CVE-2026-59887 security vulnerability in Content CortexCCx reported for GenAI ICN Plugin Vulnerability Details CVEID:CVE-2026-59887 DESCRIPTION: linkify-it is a links recognition library with full Unicode support. Prior to 5.0.2, the mailto: schema validator used by...

Security Bulletin: IBM Decision Intelligence Client Managed Software (Formerly Known as IBM Automation Decision Services) for July 2026- Multiple CVEs addressed

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Automation Decision Services. See full list below. Vulnerability Details CVEID:CVE-2026-59887 DESCRIPTION: linkify-it is a links recognition library with full...

Security Bulletin: Cyber Fraud includes components with multiple known vulnerabilities

Summary Cyber Fraud includes components with known vulnerabilities. These have been addressed in the update. Vulnerability Details CVEID:CVE-2026-59887 DESCRIPTION: linkify-it is a links recognition library with full Unicode support. Prior to 5.0.2, the mailto: schema validator used by .test and...

DoS (Denial of Service) linkify-it Dependency in Confluence Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.1.2, and 10.2.0 of Confluence Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

CLSA-2026-1784856031 TuxCare security update for linkify-it (1 CVE)

TuxCare rebuilt linkify-it to address 1 CVE. Fixed in 4.0.1-tuxcare.1...

CLSA-2026-1784682996 TuxCare security update for linkify-it (1 CVE)

TuxCare rebuilt linkify-it to address 1 CVE. Fixed in 1.2.4-tuxcare.1...

Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to linkify-it and httpcore5 (CVE-2026-59887, CVE-2026-54428 & CVE-2026-54399)

Summary IBM App Connect Enterprise Discovery Connectors and IBM App Connect Enterprise runtime are vulnerable to multiple vulnerabilities due to linkify-it and httpcore5. Vulnerability Details CVEID:CVE-2026-59887 DESCRIPTION: linkify-it is a links recognition library with full Unicode support...

NPM: linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker text

NPM: linkify-it: Quadratic-complexity DoS via the mailto: validator scan-loop on attacker text vulnerability discovered by ? in WordPress Npm linkify-it versions = 5.0.1...

linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker text

Summary linkify-it's schema-scan loop .test / .match, the documented public API invokes the mailto: schema validator at every mailto: occurrence in the input text. For each occurrence the validator does text.slicepos an On copy and runs an email regex whose local-part class srcemailname greedily...

@activeboxes/piece-gmail (0.8.1), @activeboxes/piece-imap (0.2.10) +98 more potentially affected by CVE-2026-59887 via linkify-it (>=5.0.0, <=5.0.1)

linkify-it NPM version =5.0.0, =0.6.0, =0.2.6, =0.0.1, =2026.7.1, =1.0.0, =1.0.6 - @anjirauto/app-gmail 0.5.2 - @anjirauto/app-imap 0.2.3 - @anjirauto/piece-imap 0.2.3 - @autohive/cell-gmail 0.8.1 and more Source cves: CVE-2026-59887 Source advisory: OSV:GHSA-V245-V573-V5VM...

GHSA-V245-V573-V5VM linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker text

Summary linkify-it's schema-scan loop .test / .match, the documented public API invokes the mailto: schema validator at every mailto: occurrence in the input text. For each occurrence the validator does text.slicepos an On copy and runs an email regex whose local-part class srcemailname greedily...

EUVD-2026-42321

linkify-it: Quadratic-complexity DoS via the mailto: validator scan-loop on attacker text...

Linux Distros Unpatched Vulnerability : CVE-2026-48801

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - linkify-it is a links recognition library with full Unicode support. Prior to 5.0.1, LinkifyIt.prototype.match, the package's primary public API, has ON...