CVE-2026-33079: Mistune ReDoS in LINK_TITLE_RE allows denial of service with crafted Markdown titles

Overview

Severity
N/A
Exploit Status
Not Exploited
Patch Tuesday
2026-May
Released
2026-05-10
Last Updated
2026-05-15
EPSS Score
0.35% (percentile: 26.5%)

Affected Products (1)

Open Source Software

  • azl3 python-mistune 3.0.2-1 on Azure Linux 3.0

Revision History

  • 2026-05-10: Information published.
  • 2026-05-11: Information published.
  • 2026-05-15: Information published.