134 matches found
SUSE CVE-2026-88753
A Regular-Expression Denial of Service ReDoS in the Markdown2. extractmetadata function lib/markdown2.py of trentm markdown2 through v2.5.5 allows attackers to cause a Denial of Service DoS via a crafted Markdown document...
CVE-2026-88753
A Regular-Expression Denial of Service ReDoS in the Markdown2. extractmetadata function lib/markdown2.py of trentm markdown2 through v2.5.5 allows attackers to cause a Denial of Service DoS via a crafted Markdown document...
UBUNTU-CVE-2026-88753
A Regular-Expression Denial of Service ReDoS in the Markdown2. extractmetadata function lib/markdown2.py of trentm markdown2 through v2.5.5 allows attackers to cause a Denial of Service DoS via a crafted Markdown document...
Linux Distros Unpatched Vulnerability : CVE-2026-88753
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Regular-Expression Denial of Service ReDoS in the Markdown2. extractmetadata function lib/markdown2.py of trentm markdown2 through v2.5.5 allows attackers to...
CVE-2026-88753
A flaw was found in markdown2. In the extractmetadata function, an inefficient regular expression used to parse document metadata can take an exponential amount of time to process. An attacker can exploit this vulnerability by providing a crafted Markdown document, causing excessive resource...
DEBIAN-CVE-2026-88753
A Regular-Expression Denial of Service ReDoS in the Markdown2. extractmetadata function lib/markdown2.py of trentm markdown2 through v2.5.5 allows attackers to cause a Denial of Service DoS via a crafted Markdown document...
CVE-2026-88753
A Regular-Expression Denial of Service ReDoS in the Markdown2. extractmetadata function lib/markdown2.py of trentm markdown2 through v2.5.5 allows attackers to cause a Denial of Service DoS via a crafted Markdown document...
CVE-2026-88753
The trentm markdown2 library versions through v2.5.5 is vulnerable to a Regular-Expression Denial of Service (ReDoS) in the extract_metadata() function located in lib/markdown2.py. An attacker can exploit this by providing a crafted Markdown document, which triggers an inefficient regular express...
CVE-2026-88753: Undefined Security Weakness
A Regular-Expression Denial of Service ReDoS in the Markdown2. extractmetadata function lib/markdown2.py of trentm markdown2 through v2.5.5 allows attackers to cause a Denial of Service DoS via a crafted Markdown document...
PT-2026-115002
Name of the Vulnerable Software and Affected Versions markdown2 versions prior to 2.5.5 Description A Regular-Expression Denial of Service ReDoS exists in the extract metadata function within the lib/markdown2.py file. An attacker can trigger this issue by providing a specially crafted Markdown...
CVE-2026-88753
A Regular-Expression Denial of Service ReDoS in the Markdown2. extractmetadata function lib/markdown2.py of trentm markdown2 through v2.5.5 allows attackers to cause a Denial of Service DoS via a crafted Markdown document...
CVE-2026-88753
A Regular-Expression Denial of Service ReDoS in the Markdown2. extractmetadata function lib/markdown2.py of trentm markdown2 through v2.5.5 allows attackers to cause a Denial of Service DoS via a crafted Markdown document...
EUVD-2026-102186
A Regular-Expression Denial of Service ReDoS in the Markdown2. extractmetadata function lib/markdown2.py of trentm markdown2 through v2.5.5 allows attackers to cause a Denial of Service DoS via a crafted Markdown document...
python313-markdown2-2.5.5-1.3 on GA media (moderate)
python313-markdown2-2.5.5-1.3 on GA media Announcement ID: openSUSE-SU-2026:12016-1 Rating: moderate Cross-References: CVE-2018-5773 CVE-2021-26813 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security issues fixed...
PT-2026-105725
These are all security issues fixed in the python313-markdown2-2.5.5-1.3 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:12016-1 python313-markdown2-2.5.5-1.3 on GA media
These are all security issues fixed in the python313-markdown2-2.5.5-1.3 package on the GA media of openSUSE Tumbleweed...
CVE-2026-25516
CVE-2026-25516 affects NiceGUI’s ui.markdown() in multiple sources (NVD, Red Hat, OSV, etc.). The vulnerability arises because markdown2’s default behavior allows raw HTML to pass through, enabling attacker-controlled content to inject HTML/JS event handlers when rendered via innerHTML. ui.markdo...
CVE-2026-25516: Improper Neutralization of Input During Web Page Generation
NiceGUI is a Python-based UI framework. The ui.markdown component uses the markdown2 library to convert markdown content to HTML, which is then rendered via innerHTML. By default, markdown2 allows raw HTML to pass through unchanged. This means that if an application renders user-controlled conten...