---
id: CVE-2026-88753
title: A Regular-Expression Denial of Service (ReDoS) in the Markdown2
summary: >-
  A Regular-Expression Denial of Service (ReDoS) in the Markdown2.
  extract_metadata() function (lib/markdown2.py) of trentm markdown2 through
  v2.5.5 allows attackers to cause a Denial of Service (DoS) via a crafted
  Markdown document.
severity: none
published: '2026-10-15'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T16:18:22.887'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-88753'
references:
  - url: 'https://gist.github.com/NanaSec/354b4188bbd7f4105008c7b8be49b0ba'
    label: cve@mitre.org
tags:
  - nvd
  - cve.org
ingestedAt: '2026-10-15T16:13:11.489Z'
---

## Overview

A Regular-Expression Denial of Service (ReDoS) in the Markdown2. extract_metadata() function (lib/markdown2.py) of trentm markdown2 through v2.5.5 allows attackers to cause a Denial of Service (DoS) via a crafted Markdown document.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.