CVE-2026-88753

The trentm markdown2 library (through version v2.5.5 ) is vulnerable to a Regular-Expression Denial of Service (ReDoS) . The flaw exists within the extract_metadata() function located in the lib/markdown2.py file. An attacker can exploit this by providing a crafted Markdown document to trigger a ...

EUVD-2026-102186

A Regular-Expression Denial of Service ReDoS in the Markdown2. extractmetadata function lib/markdown2.py of trentm markdown2 through v2.5.5 allows attackers to cause a Denial of Service DoS via a crafted Markdown document...