AZL-112457
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-112457.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-112457
- Upstream
- Published
- 2026-10-29T14:17:39Z
- Modified
- 2026-11-02T14:18:11Z
- Summary
- CVE-2019-25781 affecting package python-markdown 3.8.2-3
- Details
-
Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerability in inline link parsing that allows remote attackers to exhaust CPU through unmatched brackets. Attackers can submit short Markdown containing repeated [ or ![ characters, forcing LinkInlineProcessor.getText() and getLink() into quadratic scans that keep workers busy for minutes.
- References