Threats tagged 'ghsa-xr4w-hw52-gjv9'

Mistune versions from 3.3.0 up to but not including 3.3.4 contain a denial of service vulnerability. This flaw allows remote attackers to exhaust CPU resources by submitting specially crafted markdown documents that trigger quadratic-time processing in emphasis delimiter handling. The vulnerability causes an O(n²) index-fixup loop, which can stall workers for several seconds, impacting availability.