CVE-2026-88753

Description

A Regular-Expression Denial of Service (ReDoS) in the Markdown2. extract_metadata() function (lib/markdown2.py) of trentm markdown2 through v2.5.5 allows attackers to cause a Denial of Service (DoS) via a crafted Markdown document.

References

https://gist.github.com/NanaSec/354b4188bbd7f4105008c7b8be49b0ba

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102186

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3