NA

CVE-2022-34749

Published: 25/07/2022 Updated: 07/11/2023
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

In mistune up to and including 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

mistune project mistune

fedoraproject fedora 37

Vendor Advisories

Debian Bug report logs - #1016089 mistune: CVE-2022-34749 Package: src:mistune; Maintainer for src:mistune is Debian Python Modules Team <team+python@trackerdebianorg>; Reported by: Moritz Mühlenhoff <jmm@inutilorg> Date: Tue, 26 Jul 2022 20:39:02 UTC Severity: grave Tags: security Fixed in version mistune/204 ...