Lucene search
GitHub Advisory DatabaseGHSA-JRWR-5X3P-HVC3HistoryFeb 23, 2023 - 12:30 a.m.
markdown-it-py Denial of Service vulnerability in the command line interface
2023-02-2300:30:40
CWE-173
GitHub Advisory Database
github.com
10
denial of service
markdown-it-py
command line interface
utf-8
vulnerability
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0
Percentile
13.3%
Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input.
Affected configurations
Node
executablebooksmarkdown-it-pyRange<2.2.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| executablebooks | markdown-it-py | * | cpe:2.3:a:executablebooks:markdown-it-py:*:*:*:*:*:*:*:* |
Related
openvas
openvas
Fedora: Security Advisory (FEDORA-2023-f970cbb557)
2024-09-10 00:00:00
Fedora: Security Advisory for python-markdown-it-py (FEDORA-2023-c3fb6d6b8d)
2023-03-31 00:00:00
Fedora: Security Advisory for python-markdown-it-py (FEDORA-2023-8ff3ba5fb5)
2023-03-30 00:00:00
nessus
nessus
Fedora 37 : python-markdown-it-py (2023-c3fb6d6b8d)
2023-03-29 00:00:00
Fedora 39 : python-markdown-it-py (2023-f970cbb557)
2023-11-07 00:00:00
Fedora 38 : python-markdown-it-py (2023-8ff3ba5fb5)
2023-03-29 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: python-markdown-it-py-2.2.0-1.fc38
2023-03-30 00:22:52
[SECURITY] Fedora 37 Update: python-markdown-it-py-2.2.0-1.fc37
2023-03-30 01:21:19
redhatcve
redhatcve
CVE-2023-26302
2023-03-06 11:59:50
cve
cve
CVE-2023-26302
2023-02-22 23:15:17
ubuntucve
ubuntucve
CVE-2023-26302
2023-02-22 00:00:00
prion
prion
Input validation
2023-02-22 23:15:00
osv
osv
PYSEC-2023-23
2023-02-22 23:15:00
markdown-it-py Denial of Service vulnerability in the command line interface
2023-02-23 00:30:40
CVE-2023-26302
2023-02-22 23:15:17
cvelist
cvelist
CVE-2023-26302 markdown-it-py CLI crash on invalid UTF-8 characters
2023-02-22 22:02:35
debiancve
debiancve
CVE-2023-26302
2023-02-22 23:15:17
veracode
veracode
Denial Of Service (DoS)
2023-02-28 02:47:01
nvd
nvd
CVE-2023-26302
2023-02-22 23:15:17
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0
Percentile
13.3%
Related for GHSA-JRWR-5X3P-HVC3