CVE-2022-34749
Mistune vulnerable to catastrophic backtracking
In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
7.5
In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking.
- Record
CVE-2022-34749- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-1333
- Updated
- 2026-11-02
CVE List No score
In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking.
- Record
CVE-2022-34749- Updated
- 2026-11-02
EUVDEUVD-2022-0155 No score
In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking.
- Record
EUVD-2022-0155- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fw3v-x4f2-v673
8.8
Mistune vulnerable to catastrophic backtracking
In Mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking.
- Record
GHSA-fw3v-x4f2-v673- CVSS 4.0
- 8.8 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N - CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H - Weakness
- CWE-1333
- Updated
- 2026-11-02
OSVALPINE-CVE-2022-34749
7.5
In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking.
- Record
ALPINE-CVE-2022-34749- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
OSVAZL-10403
7.5
CVE-2022-34749 affecting package python-mistune for versions less than 0.8.3-5
In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking.
- Record
AZL-10403- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 10 moreShow less
OSVGHSA-fw3v-x4f2-v673
8.8
Mistune vulnerable to catastrophic backtracking
In Mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking.
- Record
GHSA-fw3v-x4f2-v673- CVSS 4.0
- 8.8 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N - CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H - Weakness
- CWE-1333
- Updated
- 2026-11-02
OSVRHSA-2026:2711
7.5
Red Hat Security Advisory: Red Hat Ceph Storage 8.1 security and bug fix update
- Record
RHSA-2026:2711- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2026:2769
7.5
Red Hat Security Advisory: Red Hat Ceph Storage 7.1 security and bug fix updates
- Record
RHSA-2026:2769- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-34749
7.5
In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking.
- Record
UBUNTU-CVE-2022-34749- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV No score
In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking.
- Record
CVE-2022-34749- Updated
- 2026-11-02
OSVDEBIAN-CVE-2022-34749 No score
In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking.
- Record
DEBIAN-CVE-2022-34749- Updated
- 2026-11-03
OSVopenSUSE-SU-2024:12350-1 No score
python310-mistune-2.0.4-1.1 on GA media
These are all security issues fixed in the python310-mistune-2.0.4-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12350-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13453-1 No score
python310-mistune2-2.0.5-1.1 on GA media
These are all security issues fixed in the python310-mistune2-2.0.5-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13453-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2025:14637-1 No score
python311-mistune-3.1.0-1.1 on GA media
These are all security issues fixed in the python311-mistune-3.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2025:14637-1- Updated
- 2026-11-02
OSVPYSEC-2022-237 No score
In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking.
- Record
PYSEC-2022-237- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mistunePyPI |
2.0.0a1 up to 2.0.3 | 2.0.3 |
py3-mistuneAlpine:v3.16 |
before 2.0.3-r0 | 2.0.3-r0 |
py3-mistuneAlpine:v3.17 |
before 2.0.3-r0 | 2.0.3-r0 |
py3-mistuneAlpine:v3.18 |
before 2.0.3-r0 | 2.0.3-r0 |
py3-mistuneAlpine:v3.19 |
before 2.0.3-r0 | 2.0.3-r0 |
py3-mistuneAlpine:v3.20 |
before 2.0.3-r0 | 2.0.3-r0 |
py3-mistuneAlpine:v3.21 |
before 2.0.3-r0 | 2.0.3-r0 |
py3-mistuneAlpine:v3.22 |
before 2.0.3-r0 | 2.0.3-r0 |
py3-mistuneAlpine:v3.23 |
before 2.0.3-r0 | 2.0.3-r0 |
py3-mistuneAlpine:v3.24 |
before 2.0.3-r0 | 2.0.3-r0 |
Show 191 moreShow less
| Package | Affected | Fixed |
|---|---|---|
python-mistuneAzure Linux:2 |
before 0.8.3-5 | 0.8.3-5 |
mistuneDebian:12 |
before 2.0.3-1 | 2.0.3-1 |
mistuneDebian:13 |
before 2.0.3-1 | 2.0.3-1 |
mistuneDebian:14 |
before 2.0.3-1 | 2.0.3-1 |
mistunePyPI |
2.0.0a1 up to 2.0.3, plus listed versions 2.0.02.0.0a22.0.0a32.0.0a42.0.0a5 Show 4 moreShow less2.0.0a62.0.0rc12.0.12.0.2 |
2.0.3 |
perl-thriftRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 0:0.20.0-4.el9cp | 0:0.20.0-4.el9cp |
python3-thriftRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 0:0.20.0-4.el9cp | 0:0.20.0-4.el9cp |
python3-thrift-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 0:0.20.0-4.el9cp | 0:0.20.0-4.el9cp |
thriftRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 0:0.20.0-4.el9cp | 0:0.20.0-4.el9cp |
thrift-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 0:0.20.0-4.el9cp | 0:0.20.0-4.el9cp |
thrift-debugsourceRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 0:0.20.0-4.el9cp | 0:0.20.0-4.el9cp |
thrift-develRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 0:0.20.0-4.el9cp | 0:0.20.0-4.el9cp |
thrift-devel-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 0:0.20.0-4.el9cp | 0:0.20.0-4.el9cp |
thrift-glibRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 0:0.20.0-4.el9cp | 0:0.20.0-4.el9cp |
thrift-glib-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 0:0.20.0-4.el9cp | 0:0.20.0-4.el9cp |
thrift-qtRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 0:0.20.0-4.el9cp | 0:0.20.0-4.el9cp |
thrift-qt-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 0:0.20.0-4.el9cp | 0:0.20.0-4.el9cp |
cephRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
ceph-baseRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
ceph-base-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
ceph-commonRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
ceph-common-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
ceph-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
ceph-debugsourceRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
ceph-exporter-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
ceph-fuseRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
ceph-fuse-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
ceph-immutable-object-cacheRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
ceph-immutable-object-cache-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
ceph-mds-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
ceph-mgr-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
ceph-mibRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
ceph-mon-client-nvmeof-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
ceph-mon-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
ceph-osd-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
ceph-radosgw-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
ceph-resource-agentsRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
ceph-selinuxRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
ceph-test-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
cephadmRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
cephfs-mirror-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
cephfs-topRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
libcephfs-daemon-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
libcephfs-develRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
libcephfs-proxy2Red Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
libcephfs-proxy2-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
libcephfs2Red Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
libcephfs2-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
libcephsqlite-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
librados-develRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
librados-devel-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
librados2Red Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
librados2-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
libradospp-develRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
libradosstriper1Red Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
libradosstriper1-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
librbd-develRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
librbd1Red Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
librbd1-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
librgw-develRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
librgw2Red Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
librgw2-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
python3-ceph-argparseRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
python3-ceph-commonRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
python3-cephfsRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
python3-cephfs-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
python3-radosRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
python3-rados-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
python3-rbdRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
python3-rbd-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
python3-rgwRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
python3-rgw-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
rbd-fuse-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
rbd-mirror-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
rbd-nbdRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
rbd-nbd-debuginfoRed Hat:ceph_storage:8.1::el9 From an advisory covering 4 CVEs |
before 2:19.2.1-331.el9cp | 2:19.2.1-331.el9cp |
cephRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
ceph-baseRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
ceph-base-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
ceph-commonRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
ceph-common-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
ceph-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
ceph-debugsourceRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
ceph-exporter-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
ceph-fuseRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
ceph-fuse-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
ceph-immutable-object-cacheRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
ceph-immutable-object-cache-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
ceph-mds-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
ceph-mgr-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
ceph-mibRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
ceph-mon-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
ceph-osd-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
ceph-radosgw-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
ceph-resource-agentsRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
ceph-selinuxRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
ceph-test-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
cephfs-mirror-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
cephfs-topRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
libcephfs-develRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
libcephfs2Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
libcephfs2-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
libcephsqlite-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
librados-develRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
librados-devel-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
librados2Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
librados2-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
libradospp-develRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
libradosstriper1Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
libradosstriper1-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
librbd-develRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
librbd1Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
librbd1-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
librgw-develRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
librgw2Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
librgw2-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
python3-ceph-argparseRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
python3-ceph-commonRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
python3-cephfsRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
python3-cephfs-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
python3-radosRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
python3-rados-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
python3-rbdRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
python3-rbd-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
python3-rgwRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
python3-rgw-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
rbd-fuse-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
rbd-mirror-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
rbd-nbdRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
rbd-nbd-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el8cp | 2:18.2.1-381.el8cp |
cephRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
ceph-baseRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
ceph-base-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
ceph-commonRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
ceph-common-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
ceph-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
ceph-debugsourceRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
ceph-exporter-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
ceph-fuseRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
ceph-fuse-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
ceph-immutable-object-cacheRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
ceph-immutable-object-cache-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
ceph-mds-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
ceph-mgr-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
ceph-mibRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
ceph-mon-client-nvmeof-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
ceph-mon-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
ceph-osd-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
ceph-radosgw-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
ceph-resource-agentsRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
ceph-selinuxRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
ceph-test-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
cephadmRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
cephfs-mirror-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
cephfs-topRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
libcephfs-develRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
libcephfs2Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
libcephfs2-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
libcephsqlite-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
librados-develRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
librados-devel-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
librados2Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
librados2-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
libradospp-develRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
libradosstriper1Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
libradosstriper1-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
librbd-develRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
librbd1Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
librbd1-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
librgw-develRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
librgw2Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
librgw2-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
python3-ceph-argparseRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
python3-ceph-commonRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
python3-cephfsRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
python3-cephfs-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
python3-radosRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
python3-rados-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
python3-rbdRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
python3-rbd-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
python3-rgwRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
python3-rgw-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
rbd-fuse-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
rbd-mirror-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
rbd-nbdRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
rbd-nbd-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs |
before 2:18.2.1-381.el9cp | 2:18.2.1-381.el9cp |
mistuneUbuntu:16.04:LTS |
All versions, plus listed versions 0.6-20.7.1-1 |
None known |
mistuneUbuntu:18.04:LTS |
All versions, plus listed versions 0.7.4-10.8-10.8.1-10.8.3-2 |
None known |
mistuneUbuntu:20.04:LTS |
All versions, plus listed versions 0.8.4-10.8.4-2 |
None known |
mistuneUbuntu:22.04:LTS |
All versions, plus listed versions 0.8.4-40.8.4-52.0.0-1+really0.8.4-1 |
None known |
python-mistuneopenSUSE:Tumbleweed |
before 3.1.0-1.1 | 3.1.0-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-34749 is a high vulnerability (CVSS 7.5) in Mistune Project Mistune, published July 25, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.62%, the 76th percentile. Fixed in mistune 2.0.3.
References
github.com/lepture/mistune/releases
github.com/lepture/mistune/commit/a6d43215132fe4f3d93f8d7e90ba83b16a0838b2
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TQHXITQ2DSBYOILKHXBSBB7PFBPZHF63
nvd.nist.gov/vuln/detail/CVE-2022-34749
github.com/pypa/advisory-database/tree/main/vulns/mistune/PYSEC-2022-237.yaml
github.com/lepture/mistune/issues/314
Show 146 moreShow less
github.com/lepture/mistune/commit/ca1e7b506850f4e488823fc7338b49a8f9852718
lists.fedoraproject.org/archives/list/[email protected]/message/TQHXITQ2DSBYOILKHXBSBB7PFBPZHF63
github.com/advisories/GHSA-fw3v-x4f2-v673
security.alpinelinux.org/vuln/CVE-2022-34749
github.com/CVEProject/cvelistV5/tree/main/cves/2022/34xxx/CVE-2022-34749.json
security-tracker.debian.org/tracker/CVE-2022-34749
github.com/lepture/mistune
access.redhat.com/errata/RHSA-2026:2711
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=2112230
bugzilla.redhat.com/show_bug.cgi?id=2151848
bugzilla.redhat.com/show_bug.cgi?id=2250568
bugzilla.redhat.com/show_bug.cgi?id=2320312
bugzilla.redhat.com/show_bug.cgi?id=2325394
bugzilla.redhat.com/show_bug.cgi?id=2356539
bugzilla.redhat.com/show_bug.cgi?id=2389907
bugzilla.redhat.com/show_bug.cgi?id=2389970
bugzilla.redhat.com/show_bug.cgi?id=2406674
bugzilla.redhat.com/show_bug.cgi?id=2407258
bugzilla.redhat.com/show_bug.cgi?id=2411968
bugzilla.redhat.com/show_bug.cgi?id=2412473
bugzilla.redhat.com/show_bug.cgi?id=2413969
bugzilla.redhat.com/show_bug.cgi?id=2414843
bugzilla.redhat.com/show_bug.cgi?id=2415380
bugzilla.redhat.com/show_bug.cgi?id=2415838
bugzilla.redhat.com/show_bug.cgi?id=2416558
bugzilla.redhat.com/show_bug.cgi?id=2416559
bugzilla.redhat.com/show_bug.cgi?id=2416777
bugzilla.redhat.com/show_bug.cgi?id=2416987
bugzilla.redhat.com/show_bug.cgi?id=2417015
bugzilla.redhat.com/show_bug.cgi?id=2417688
bugzilla.redhat.com/show_bug.cgi?id=2421434
bugzilla.redhat.com/show_bug.cgi?id=2421706
bugzilla.redhat.com/show_bug.cgi?id=2421743
bugzilla.redhat.com/show_bug.cgi?id=2423404
bugzilla.redhat.com/show_bug.cgi?id=2424278
bugzilla.redhat.com/show_bug.cgi?id=2427566
bugzilla.redhat.com/show_bug.cgi?id=2431960
bugzilla.redhat.com/show_bug.cgi?id=2432068
bugzilla.redhat.com/show_bug.cgi?id=2432370
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2711.json
access.redhat.com/security/cve/CVE-2019-10790
cve.org/CVERecord?id=CVE-2019-10790
nvd.nist.gov/vuln/detail/CVE-2019-10790
security.snyk.io/vuln/SNYK-JS-TAFFYDB-2992450
snyk.io/vuln/SNYK-JS-TAFFY-546521
npmjs.com/package/taffy
usenix.org/system/files/sec21-xiao.pdf
access.redhat.com/security/cve/CVE-2022-34749
cve.org/CVERecord?id=CVE-2022-34749
access.redhat.com/security/cve/CVE-2024-31884
cve.org/CVERecord?id=CVE-2024-31884
nvd.nist.gov/vuln/detail/CVE-2024-31884
github.com/ceph/ceph/pull/66089
github.com/ceph/ceph/pull/66140
github.com/ceph/ceph/pull/66141
github.com/ceph/ceph/pull/66142
github.com/ceph/ceph/security/advisories/GHSA-xj9f-7g59-m4jx
access.redhat.com/security/cve/CVE-2025-58183
cve.org/CVERecord?id=CVE-2025-58183
nvd.nist.gov/vuln/detail/CVE-2025-58183
access.redhat.com/errata/RHSA-2026:3122
go.dev/cl/709861
go.dev/issue/75677
groups.google.com/g/golang-announce/c/4Emdl2iQ_bI
pkg.go.dev/vuln/GO-2025-4014
access.redhat.com/errata/RHSA-2026:2769
bugzilla.redhat.com/show_bug.cgi?id=1944286
bugzilla.redhat.com/show_bug.cgi?id=2272997
bugzilla.redhat.com/show_bug.cgi?id=2273911
bugzilla.redhat.com/show_bug.cgi?id=2312579
bugzilla.redhat.com/show_bug.cgi?id=2323735
bugzilla.redhat.com/show_bug.cgi?id=2329426
bugzilla.redhat.com/show_bug.cgi?id=2345695
bugzilla.redhat.com/show_bug.cgi?id=2360974
bugzilla.redhat.com/show_bug.cgi?id=2372611
bugzilla.redhat.com/show_bug.cgi?id=2374412
bugzilla.redhat.com/show_bug.cgi?id=2392386
bugzilla.redhat.com/show_bug.cgi?id=2392861
bugzilla.redhat.com/show_bug.cgi?id=2404076
bugzilla.redhat.com/show_bug.cgi?id=2404656
bugzilla.redhat.com/show_bug.cgi?id=2404880
bugzilla.redhat.com/show_bug.cgi?id=2412237
bugzilla.redhat.com/show_bug.cgi?id=2412474
bugzilla.redhat.com/show_bug.cgi?id=2414844
bugzilla.redhat.com/show_bug.cgi?id=2414943
bugzilla.redhat.com/show_bug.cgi?id=2416314
bugzilla.redhat.com/show_bug.cgi?id=2418462
bugzilla.redhat.com/show_bug.cgi?id=2428617
bugzilla.redhat.com/show_bug.cgi?id=2432069
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2769.json
access.redhat.com/security/cve/CVE-2021-23358
cve.org/CVERecord?id=CVE-2021-23358
nvd.nist.gov/vuln/detail/CVE-2021-23358
access.redhat.com/security/cve/CVE-2024-11831
cve.org/CVERecord?id=CVE-2024-11831
nvd.nist.gov/vuln/detail/CVE-2024-11831
github.com/yahoo/serialize-javascript/commit/f27d65d3de42affe2aac14607066c293891cec4e
github.com/yahoo/serialize-javascript/pull/173
access.redhat.com/security/cve/CVE-2024-47866
cve.org/CVERecord?id=CVE-2024-47866
nvd.nist.gov/vuln/detail/CVE-2024-47866
github.com/ceph/ceph/security/advisories/GHSA-mgrm-g92q-f8h8
access.redhat.com/security/cve/CVE-2024-51744
cve.org/CVERecord?id=CVE-2024-51744
nvd.nist.gov/vuln/detail/CVE-2024-51744
github.com/golang-jwt/jwt/commit/7b1c1c00a171c6c79bbdb40e4ce7d197060c1c2c
github.com/golang-jwt/jwt/security/advisories/GHSA-29wx-vh33-7x7r
access.redhat.com/security/cve/CVE-2024-55565
bugzilla.redhat.com/show_bug.cgi?id=2331063
cve.org/CVERecord?id=CVE-2024-55565
nvd.nist.gov/vuln/detail/CVE-2024-55565
github.com/ai/nanoid/compare/3.3.7...3.3.8
github.com/ai/nanoid/pull/510
github.com/ai/nanoid/releases/tag/5.0.9
access.redhat.com/security/cve/CVE-2025-26791
cve.org/CVERecord?id=CVE-2025-26791
nvd.nist.gov/vuln/detail/CVE-2025-26791
ensy.zip/posts/dompurify-323-bypass
github.com/cure53/DOMPurify/commit/d18ffcb554e0001748865da03ac75dd7829f0f02
github.com/cure53/DOMPurify/releases/tag/3.2.4
nsysean.github.io/posts/dompurify-323-bypass
access.redhat.com/security/cve/CVE-2025-47913
cve.org/CVERecord?id=CVE-2025-47913
nvd.nist.gov/vuln/detail/CVE-2025-47913
github.com/advisories/GHSA-hcg3-q754-cr77
go.dev/cl/700295
go.dev/issue/75178
pkg.go.dev/vuln/GO-2025-4116
access.redhat.com/security/cve/CVE-2025-52555
cve.org/CVERecord?id=CVE-2025-52555
nvd.nist.gov/vuln/detail/CVE-2025-52555
github.com/ceph/ceph/pull/60314
github.com/ceph/ceph/security/advisories/GHSA-89hm-qq33-2fjm
access.redhat.com/security/cve/CVE-2025-61729
cve.org/CVERecord?id=CVE-2025-61729
nvd.nist.gov/vuln/detail/CVE-2025-61729
go.dev/cl/725920
go.dev/issue/76445
groups.google.com/g/golang-announce/c/8FJoBkPddm4
pkg.go.dev/vuln/GO-2025-4155
ubuntu.com/security/CVE-2022-34749
suse.com/security/cve/CVE-2022-34749
suse.com/security/cve/CVE-2017-15612
suse.com/security/cve/CVE-2017-16876
lists.opensuse.org/archives/list/[email protected]/thread/IW7A2S3IHI5EEZCNENY4D7VRBPONFU5C