HIGHCVSS v3.1 7.5Vulnerability

CVE-2026-88753

A Regular-Expression Denial of Service (ReDoS) in the Markdown2. extract_metadata() function (lib/markdown2.py) of trentm markdown2 through v2.5.5 allows attackers to cause a Denial of Service (DoS) via a crafted Markdown document.

Properties

Severity
HIGH
Nvd fetched at
2026-10-20T21:14:08.448323+00:00
Cvss severity
HIGH
Cvss score
7.5
Epss score
0.00324
Retrieved at
2026-10-21T01:24:50+00:00
Last source
FIRST EPSS
Cvss version
3.1
Score
7.5
Cve id
CVE-2026-88753
Cvss vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
First seen by Signal
2026-10-18T13:39:03+00:00
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published at
2026-10-15T16:18:22.887
Last modified
2026-10-20T03:17:17.410
Epss percentile
0.24001

Related Entities (1)

HAS_WEAKNESS (1)

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-88753 (CVSS v3.1 7.5) — Ninja Signal Threat Intelligence | Ninja Signal