Description
Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerability in inline link parsing that allows remote attackers to exhaust CPU through unmatched brackets. Attackers can submit short Markdown containing repeated [ or ![ characters, forcing LinkInlineProcessor.getText() and getLink() into quadratic scans that keep workers busy for minutes.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Python-Markdown Markdown
Default version status: unaffected
3.0 to ≤ 3.11.2affected
pkg:pypi/markdownReferences
- https://github.com/Python-Markdown/markdown/issues/798 ↗
- https://github.com/Python-Markdown/markdown ↗
- https://github.com/Python-Markdown/markdown/issues/1654 ↗
- https://github.com/Python-Markdown/markdown/blob/b41e0aaf1181f1a8cb200cf5a815aad7c0020d23/markdown/inlinepatterns.py#L1155-L1172 ↗
- https://www.vulncheck.com/advisories/python-markdown-3.0-through-3.11.2-denial-of-service-via-link-bracket-parsing ↗