Lucene search
GoogleOSV:GHSA-JRWR-5X3P-HVC3HistoryFeb 23, 2023 - 12:30 a.m.
markdown-it-py Denial of Service vulnerability in the command line interface
2023-02-2300:30:40
Google
osv.dev
7
markdown-it-py
denial of service
command line interface
software
utf-8 characters
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0
Percentile
13.3%
Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input.
Related
openvas
openvas
Fedora: Security Advisory (FEDORA-2023-f970cbb557)
2024-09-10 00:00:00
Fedora: Security Advisory for python-markdown-it-py (FEDORA-2023-c3fb6d6b8d)
2023-03-31 00:00:00
Fedora: Security Advisory for python-markdown-it-py (FEDORA-2023-8ff3ba5fb5)
2023-03-30 00:00:00
nessus
nessus
Fedora 37 : python-markdown-it-py (2023-c3fb6d6b8d)
2023-03-29 00:00:00
Fedora 39 : python-markdown-it-py (2023-f970cbb557)
2023-11-07 00:00:00
Fedora 38 : python-markdown-it-py (2023-8ff3ba5fb5)
2023-03-29 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: python-markdown-it-py-2.2.0-1.fc38
2023-03-30 00:22:52
[SECURITY] Fedora 37 Update: python-markdown-it-py-2.2.0-1.fc37
2023-03-30 01:21:19
github
github
markdown-it-py Denial of Service vulnerability in the command line interface
2023-02-23 00:30:40
redhatcve
redhatcve
CVE-2023-26302
2023-03-06 11:59:50
cve
cve
CVE-2023-26302
2023-02-22 23:15:17
ubuntucve
ubuntucve
CVE-2023-26302
2023-02-22 00:00:00
prion
prion
Input validation
2023-02-22 23:15:00
osv
osv
PYSEC-2023-23
2023-02-22 23:15:00
CVE-2023-26302
2023-02-22 23:15:17
cvelist
cvelist
CVE-2023-26302 markdown-it-py CLI crash on invalid UTF-8 characters
2023-02-22 22:02:35
debiancve
debiancve
CVE-2023-26302
2023-02-22 23:15:17
veracode
veracode
Denial Of Service (DoS)
2023-02-28 02:47:01
nvd
nvd
CVE-2023-26302
2023-02-22 23:15:17
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0
Percentile
13.3%
Related for OSV:GHSA-JRWR-5X3P-HVC3