CyberRota Analysis
AI-GeneratedMistune, a Python Markdown parser, is vulnerable to unbounded recursion due to its inability to detect indirect cycles in self-includes prior to version 3.3.0. This flaw can lead to a RecursionError, causing the rendering request to crash. Developers using affected versions should prioritize upgrading to 3.3.0 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the Include directive in src/mistune/directives/include.py detects only direct self-includes and not indirect cycles, allowing two markdown files that include each other to trigger unbounded recursion, raise RecursionError, and crash the rendering request. This issue is fixed in version 3.3.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)