Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Lepture

#29569of 53,625
8.8Total CVSS
Vulnerabilities · 1
PT-2022-22315
8.8
2022-07-25
Mistune · Mistune · CVE-2022-34749
**Name of the Vulnerable Software and Affected Versions** Mistune versions 2.0.2 and earlier **Description** The issue arises from the support of inline markup in Mistune, which utilizes regular expressions. These regular expressions can lead to a high amount of backtracking on certain edge cases, a behavior commonly referred to as catastrophic backtracking. **Recommendations** For Mistune versions 2.0.2 and earlier, consider updating to a version that addresses the issue of catastrophic backtracking in regular expressions used for inline markup support. At the moment, there is no information about a newer version that contains a fix for this vulnerability.