Threats tagged 'brew-jupyterlab-cve-2026-59925'

CVE-2026-59925 is a high-severity algorithmic-complexity denial-of-service vulnerability in the Mistune markdown parser's core emphasis parsing. The parser performs quadratic-time work when processing long sequences of well-formed '**x**' or '***x***' emphasis pairs, causing excessive CPU usage. This affects the default Mistune configuration without requiring any plugins. The vulnerability has been confirmed in Mistune versions used by JupyterLab from 1.2.0 up to but not including 4.6.1. A fix is available in version 4.6.1.