Skip to content
Threat Feed
Subscribe

Product

Mistune Block_parser

1 brief RSS
medium advisory

CVE-2026-59928 Mistune block_parser: Quadratic-Time Parsing Leading to Denial of Service

CVE-2026-59928 identifies a vulnerability in the Mistune block_parser component where quadratic-time parsing of long lists of repeated reference-link definitions can be exploited by an attacker to cause a denial-of-service condition due to excessive resource consumption.

Mistune block_parser denial-of-service vulnerability markdown-parser
1c