CVE-2022-34749 | BDVDB-2026-180901 Detail

Description#

In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/lepture/mistune/releases
https://github.com/lepture/mistune/commit/a6d43215132fe4f3d93f8d7e90ba83b16a0838b2
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TQHXITQ2DSBYOILKHXBSBB7PFBPZHF63/

Exploit#

No public exploit known

History#

Version 12022-07-25Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.