p PatchFirst

PatchFirst · Latest vulnerabilities

python-markdown vulnerabilities

Vulnerability published for python-markdown in the last 30 days: 1. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2019-25781

    High · CVSS 8.7EPSS 0.42%No fix published

    Python-Markdown 3.0 through 3.11.2 Denial of Service via Link Bracket Parsing

    Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerability in inline link parsing that allows remote attackers to exhaust CPU through unmatched brackets. Attackers can submit short Markdown containing repeated [ or ![ characters, forcing LinkInlineProcessor.getText() and getLink() into quadratic scans that keep workers busy for minutes.

    python-markdownOperating systems
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →