{"action":"Upgrade markdown2 to 2.4.0 or later.","affected":[{"fixed":"2.4.0","introduced":"1.0.1.18"}],"component":"markdown2","cve_ids":["CVE-2021-26813"],"ecosystem":"PyPI","epss":0.02319,"exploited":false,"fixed_versions":["2.4.0"],"ghsa_id":"GHSA-jr9p-r423-9m2r","id":"tcs_01M5KGBM5ANXFPN0VSBR0Z1DDB","modified_at":"2023-11-08T04:05:22.342158Z","published_at":"2021-03-03T16:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-20","https://github.com/trentm/python-markdown2/pull/387","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BRP5RN35JZTSJ3JT4722F447ZDK7LZS5/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JTIX5UXRDJZJ57DO4V33ZNJTNKWGBQLY/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J752422YELXLMLZJPVJVKD2KKHHQRVEH/","https://github.com/advisories/GHSA-jr9p-r423-9m2r"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-20","url":"https://osv.dev/vulnerability/PYSEC-2021-20"}],"summary":"markdown2 >=1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of service vulnerability. If an attacker provides a malicious string, it can make markdown2 processing difficult or del"}