{"action":"Upgrade mistune to 2.0.3 or later.","affected":[{"fixed":"2.0.3","introduced":"2.0.0a1"}],"component":"mistune","cve_ids":["CVE-2022-34749"],"ecosystem":"PyPI","epss":0.01617,"exploited":false,"fixed_versions":["2.0.3"],"ghsa_id":"GHSA-fw3v-x4f2-v673","id":"tcs_01M5KGGPP3WMC2FRZ8VXAB2YG9","modified_at":"2023-11-08T04:09:46.263382Z","published_at":"2022-07-25T23:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-237","https://github.com/lepture/mistune/commit/a6d43215132fe4f3d93f8d7e90ba83b16a0838b2","https://github.com/lepture/mistune/releases","https://github.com/advisories/GHSA-fw3v-x4f2-v673"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-237","url":"https://osv.dev/vulnerability/PYSEC-2022-237"}],"summary":"In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named cat"}