Threats tagged 'brew-jupyterlab-cve-2026-59928'

CVE-2026-59928 is a denial-of-service vulnerability in the Mistune markdown parser used by JupyterLab. It arises from quadratic-time parsing behavior when processing long lists of repeated reference-link definitions, causing CPU usage to increase dramatically with input size. This can be exploited by submitting markdown documents with many repeated reference-link definitions, leading to high CPU consumption and potential service disruption. The issue affects Mistune versions used in JupyterLab from 1.2.0 up to but not including 4.6.1. A fix is available in version 4.6.1 that optimizes parsing to linear time.