Denial of Service in python-markdown2 via Unclosed Inline Links

Publication date: 2026-10-28

Last updated on: 2026-10-28

Assigner: VulnCheck

Description

python-markdown2 through 2.5.5 contains a denial of service vulnerability that allows remote users to exhaust CPU by submitting Markdown with unclosed inline link destinations. Attackers can submit repeated '[a](' or '![a](' sequences, causing _find_balanced to rescan the remaining document for each link and consume quadratic CPU time.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-28

Last Modified

2026-10-28

Generated

2026-10-29

EPSS Evaluated

N/A

NVD

CVE-2026-118694

EUVD

EUVD-2026-112495

Affected Vendors & Products

Vendor	Product	Version / Range
trentm	python-markdown2	0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-407	An algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an attacker, typically using crafted manipulations that ensure that the worst case is being reached.

Attack-Flow Graph

AI Quick Actions have not been generated yet.

Hi! I’m here to help you understand CVE-2026-118694. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70