Threats tagged 'ghsa-296h-qmjr-9mv2'

Mistune versions prior to 3.3.3 have a denial of service vulnerability in the InlineParser.parse_link function. This flaw allows attackers to cause excessive CPU consumption by submitting Markdown content with thousands of balanced nested brackets that do not form valid links. The vulnerability triggers repeated scanning operations that lead to quadratic CPU growth, potentially exhausting resources in applications parsing such Markdown.