Skip to content
CVE PROGRAM SOURCE RECORD3.3 Low

CVE-2023-26303

markdown-it-py crash on null assertions

Description

Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Executable Books markdown-it-py

Default version status: unaffected

  • 0 to < v2.2.0affected

References