← Back

CVE-2023-26303

nvd nist
Published: Feb 23, 2023Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input.

Affected (1)

Executablebooks
1 product
Markdown It Py
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Markdown It Py
Before 2.2.0

Related CWEs

CWE-173
Improper Handling of Alternate Encoding
The product does not properly handle when an input uses an alternate encoding that is valid for the control sphere to which the input is being sent.

References (2)

Source: security@ubuntu.com
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Patch

Timeline

No history available yet.