Lepture

**Name of the Vulnerable Software and Affected Versions** Mistune versions prior to 3.3.0 **Description** The Include directive in `src/mistune/directives/include.py` only detects direct self-includes and fails to identify indirect cycles. This allows two markdown files that include each other to trigger unbounded recursion, resulting in a `RecursionError` and crashing the rendering request. **Recommendations** Update to version 3.3.0.

**Name of the Vulnerable Software and Affected Versions** Mistune versions 2.0.2 and earlier **Description** The issue arises from the support of inline markup in Mistune, which utilizes regular expressions. These regular expressions can lead to a high amount of backtracking on certain edge cases, a behavior commonly referred to as catastrophic backtracking. **Recommendations** For Mistune versions 2.0.2 and earlier, consider updating to a version that addresses the issue of catastrophic backtracking in regular expressions used for inline markup support. At the moment, there is no information about a newer version that contains a fix for this vulnerability.