Denial of Service Vulnerability in Markdown2 by Trentm
CVE-2026-88753

7.5HIGH

Key Information:

Vendor

Trentm

Status
Markdown2
Vendor
CVE Published:
15 October 2026

What is CVE-2026-88753?

A vulnerability in the Markdown2 library affects the extract_metadata() function, allowing attackers to exploit crafted Markdown documents to induce a Denial of Service condition. This issue arises from the way regular expressions are handled, causing significant performance degradation and ultimately rendering the service unavailable.

References

https://gist.github.com/NanaSec/354b4188bbd7f4105008c7b8b...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.