EUVD-2026-65137

Mistune: Denial of Service — RecursionError via Excessive Emphasis Markers in Markdown...

Linux Distros Unpatched Vulnerability : CVE-2026-76098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mistune is a Python Markdown parser with renderers and plugins. Versions 3.3.0 through 3.3.2 are vulnerable to DoS through deeply nested tokens. HTML rendering...

AZL-97956 CVE-2026-76098 affecting package python-mistune for versions less than 3.3.4-1

Mistune is a Python Markdown parser with renderers and plugins. Versions 3.3.0 through 3.3.2 are vulnerable to DoS through deeply nested tokens. HTML rendering creates deeply nested emphasis tokens from consecutive asterisk characters, and recursive rendering in HTMLRenderer.rendertoken can excee...

CVE-2026-76098

Mistune (Python Markdown parser) versions 3.3.0 through 3.3.2 are vulnerable to Denial of Service via deeply nested emphasis tokens. When HTML rendering processes consecutive asterisk characters, recursive calls in HTMLRenderer.render_token() can exceed Python's recursion limit, raising a Recursi...

CVE-2026-76098

Mistune is a Python Markdown parser with renderers and plugins. Versions 3.3.0 through 3.3.2 are vulnerable to DoS through deeply nested tokens. HTML rendering creates deeply nested emphasis tokens from consecutive asterisk characters, and recursive rendering in HTMLRenderer.rendertoken can excee...

PT-2026-81027

Name of the Vulnerable Software and Affected Versions Mistune versions 3.3.0 through 3.3.2 Description This issue allows a Denial of Service DoS through deeply nested tokens. When rendering HTML, consecutive asterisk characters can create deeply nested emphasis tokens. The recursive rendering...