Mistune Project vulnerabilities
We track 1 vulnerability in Mistune Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 25, 2022.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Mistune Project vulnerabilities
- 7.5 High severity
Mistune: Inefficient Regular Expression Complexity
In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking.