Threats tagged 'brew-jupyterlab-cve-2026-49851'

Mistune, a Python Markdown parser used in jupyterlab versions >=1.2.0 and <4.6.1, contains a denial-of-service vulnerability due to quadratic-time parsing behavior in the parse_link_text function. An attacker can craft Markdown input with many consecutive '[' characters to cause excessive CPU usage, leading to service disruption. The issue arises from inefficient repeated scanning inside a loop, resulting in O(n²) complexity. A fix is available in version 4.6.1.