Vulnerability in Lepture Mistune
CVE-2026-33079
In versions 3.0.0a1 through 3.2.0 of Mistune, there is a ReDoS (Regular Expression Denial of Service) vulnerability in `LINK_TITLE_RE` that allows an attacker who can supply Markdown for parsing to cause denial of service. The regular expr…
Vulnerability class: ReDoS (Regular Expression Denial of Service)
EPSS: 0.000 (5.8th percentile) — read the EPSS interpretation.
Affected products
- Lepture Mistune — versions >=3.0.0a1, <= 3.2.0