HIGHCVSS v3.1 7.5Vulnerability
CVE-2026-115347
Mistune before 3.3.0 contains an inefficient algorithmic complexity vulnerability in parse_link_text that allows remote attackers to cause denial of service through unbalanced square brackets. Attackers can submit markdown containing long runs of unmatched brackets to mistune.html(), triggering repeated forward scans that stall worker processes for minutes.
Properties
- Severity
- HIGH
- Nvd fetched at
- 2026-10-23T02:14:06.697318+00:00
- Cvss severity
- HIGH
- Cvss score
- 7.5
- Retrieved at
- 2026-10-23T02:20:30+00:00
- Score
- 7.5
- Cvss version
- 3.1
- Last source
- NVD
- Cve id
- CVE-2026-115347
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- First seen by Signal
- 2026-10-22T22:12:23+00:00
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Published at
- 2026-10-22T19:17:40.267
- Last modified
- 2026-10-22T19:17:40.387
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph