Skip to content

Commit 901cecc

Browse files
committed
changelog: add entry for pymdown-extensions exponential ReDoS CVE
1 parent a13c724 commit 901cecc

1 file changed

Lines changed: 3 additions & 0 deletions

File tree

.changelog/5609.txt

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
```release-note:security
2+
Upgrade `pymdown-extensions` from `10.0` to `11.0.1` in `control-plane/gateway07/gateway-api-0.7.1-custom/requirements.txt` to resolve [GHSA-gm37-52c6-37mw](https://github.com/advisories/GHSA-gm37-52c6-37mw): exponential backtracking ReDoS in the `caret`, `tilde`, `betterem`, and `magiclink` inline processors, where a crafted Markdown input under 50 bytes can pin the rendering thread at 100% CPU indefinitely (CWE-1333, CVSS 7.5 High).
3+
```

0 commit comments

Comments
 (0)