Threats tagged 'brew-jupyterlab-cve-2026-76098'

Mistune v3.3.2 suffers from a Denial of Service vulnerability caused by uncontrolled recursion when rendering deeply nested emphasis tokens in Markdown. Submitting Markdown with about 1,000 consecutive asterisks triggers approximately 500 levels of nested <strong> tags, exceeding Python's recursion limit and causing a RecursionError crash. This affects all mistune APIs including markdown() and html(). The vulnerability has a CVSS score of 7.5 (High) and can be exploited remotely without authentication. A fix is available in version 4.6.2.