CVE-2021-46149: Mediawiki

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. A denial of service (resource consumption) can be accomplished by searching for a very long key in a Language Name Search.

Affected products

• Mediawiki Mediawiki: before 1.35.5 (fixed in 1.35.5); from 1.36.0, before 1.36.3 (fixed in 1.36.3); from 1.37.0, before 1.37.1 (fixed in 1.37.1)

Published 2022-01-10. Last modified 2026-06-17.