Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2023-26302

Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input.

VectorLOCAL

PublishedFeb 22, 2023, 23:15

Published Bysecurity@ubuntu.com

Base Score

Score5.5

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

markdown-it-py(PyPI)02.2.0N/A

References

https://github.com/executablebooks/markdown-it-py/commit/53ca3e9c2b9e9b295f6abf7f4ad2730a9b70f68c

Weakness Type

NVD-CWE-Other

CVSS Metrics

Base Score

5.5

Vector String

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Base SeverityMedium

Version

3.1

Attack Vector (AV)

LOCAL