Python-Markdown 3.0 Through 3.11.2 (3.0-3.11.2) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/python-markdown-3.0-through-3.11.2-3.0-3.11.2/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 30 Oct 2026 05:20:12 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgPython-Markdown: Algorithmic complexity vulnerability (CVE-2019-25781)https://feed.craftedsignal.io/briefs/2026-10-python-markdown-cve-2019-25781/Fri, 30 Oct 2026 05:20:12 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-python-markdown-cve-2019-25781/Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerability in inline link parsing that allows CPU exhaustion.Python-Markdown versions 3.0 through 3.11.2 contain an algorithmic complexity vulnerability in inline link parsing. Remote attackers can submit short Markdown containing repeated [ or ![ characters, forcing LinkInlineProcessor.getText() and getLink() into quadratic scans that keep workers busy for minutes.

]]>lowadvisory