CVE-2026-121437 - Mistune 3.3.0 before 3.3.4 Quadratic-Time DoS via _process_emphasis_delimiters
CVE ID :CVE-2026-121437 Published : Nov. 3, 2026, 2:28 p.m. | 35 minutes ago Description :Mistune from 3.3.0 before 3.3.4 contains a denial of service vulnerability that allows remote attackers to exhaust CPU through quadratic-time emphasis delimiter processing. Attackers can submit small...