| Package | Affected versions | Patched versions |
|---|---|---|
| mistune | ≥ 2.0.0a1, < 2.0.3 | 2.0.3 |
| mistune | ≤ 2.0.2 |
In Mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free