摘要:
In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking.
安全等级: Low
公告ID: KylinSec-SA-2022-1808
发布日期: 2022年8月5日
关联CVE: CVE-2022-34749
In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking.
| cve名称 | 产品 | 组件 | 是否受影响 |
|---|---|---|---|
| CVE-2022-34749 | KY3.4-4A | python-mistune | Unaffected |
| CVE-2022-34749 | KY3.4-5 | python-mistune | Unaffected |
| CVE-2022-34749 | KY3.5.1 | python-mistune | Unaffected |
