Threats tagged 'brew-adr-viewer-cve-2026-59925'

CVE-2026-59925 is a denial-of-service vulnerability in the mistune markdown parser used by the adr-viewer product. It affects mistune versions prior to 3.3.0 and is triggered by parsing long sequences of double-asterisk or triple-asterisk emphasis pairs, causing quadratic-time parsing and excessive CPU usage. A patch is available that limits unmatched opening emphasis markers to restore linear-time parsing.