Threats tagged 'brew-adr-viewer-cve-2026-59927'

CVE-2026-59927 is a medium severity vulnerability in the mistune markdown renderer's Include directive. It allows uncontrolled recursion through mutual inclusion of markdown files, leading to unbounded recursion and a Python RecursionError that crashes the renderer, causing denial of service. The vulnerability occurs because the directive detects only direct self-inclusion but not indirect inclusion cycles. A patch is available that fixes this issue by tracking included files to prevent recursive cycles.