{"schema":"threatline.record/2","record":{"id":"CVE-2026-118694","aliases":[],"summary":"python-markdown2 through 2.5.5 Denial of Service via Unclosed Inline Link Destinations","details":"python-markdown2 through 2.5.5 contains a denial of service vulnerability that allows remote users to exhaust CPU by submitting Markdown with unclosed inline link destinations. Attackers can submit repeated '[a](' or '![a](' sequences, causing _find_balanced to rescan the remaining document for each link and consume quadratic CPU time.","categories":["Runtimes & languages"],"product":"python-markdown2","vendor":"trentm","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-118694","source_modified_at":"2026-10-28T21:11:20.814Z","fetched_at":"2026-10-29T00:48:09.584895Z","product":"python-markdown2","vendor":"trentm","versions":[{"version":"0","lessThanOrEqual":"2.5.5","status":"affected","versionType":"custom"}],"defaultStatus":"unaffected"}],"fixed_versions":[],"cvss":8.7,"severity":"High","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-28T21:11:20.814Z","modified_at":"2026-10-28T21:11:20.814Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-118694","fetched_at":"2026-10-29T00:48:09.584895Z","source_modified_at":"2026-10-28T21:11:20.814Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://github.com/trentm/python-markdown2/issues/750","tags":["issue-tracking"]},{"source":"CVE List","url":"https://github.com/trentm/python-markdown2","tags":["product"]},{"source":"CVE List","url":"https://github.com/trentm/python-markdown2/blob/2.5.5/lib/markdown2.py#L1478-L1492","tags":["technical-description"]},{"source":"CVE List","url":"https://github.com/trentm/python-markdown2/blob/2.5.5/lib/markdown2.py#L3029","tags":["technical-description"]},{"source":"CVE List","url":"https://github.com/trentm/python-markdown2/pull/751","tags":["patch","issue-tracking"]},{"source":"CVE List","url":"https://www.vulncheck.com/advisories/python-markdown2-through-2.5.5-denial-of-service-via-unclosed-inline-link-destinations","tags":["third-party-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-28T21:11:20.814Z","content_hash":"e8acb295079421b6d3c077a0c62dd9b4915956b089298b5b842d18fdae1d4f4f"}}