CVE-2026-59927

Katalog CVE

CVSS 5.3 · Medium EPSS 0,53%

Kerentanan Uncontrolled Recursion pada mistune project mistune. Skor CVSS 3.1 5.3 (Medium) menurut github.com.

Deskripsi (NVD)

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the Include directive in src/mistune/directives/include.py detects only direct self-includes and not indirect cycles, allowing two markdown files that include each other to trigger unbounded recursion, raise RecursionError, and crash the rendering request. This issue is fixed in version 3.3.0.

Rincian

Terbit di NVD

8 Juli 2026

Terakhir diubah

9 Juli 2026

Status NVD

Analyzed

CVSS 3.1

5.3 (Medium), sumber github.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-674: Uncontrolled Recursion
CWE-755: Improper Handling of Exceptional Conditions

EPSS (30 hari)

0,53% peluang dieksploitasi; lebih tinggi dari 43,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/lepture/mistune/commit/1bef343ade163fc3bb95572b15be720084cdb993 patch
• https://github.com/lepture/mistune/security/advisories/GHSA-8mpj-m6qm-5qr8 exploit · advisory pihak ketiga
• https://github.com/lepture/mistune/releases/tag/v3.3.0 release notes