Threats tagged 'brew-jupyterlab-cve-2026-33079'

A Regular Expression Denial of Service (ReDoS) vulnerability exists in the mistune Markdown parser used by JupyterLab. The flaw is in the LINK_TITLE_RE regex, which can be exploited by crafted Markdown input containing repeated escaped punctuation sequences, causing exponential backtracking and significant parsing delays. This can lead to denial of service with very small inputs (under 100 bytes). The vulnerability affects mistune versions used in JupyterLab >=4.0.3 and <4.5.7_1. A fix is available in version 4.5.7_1 that modifies the regex to eliminate the ambiguity causing the exponential backtracking.