CVE-2023-26302

Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...

CVE-2023-26302

Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...

markdown-it-py 安全漏洞

markdown-it-py is a Markdown parser open-sourced by Executable Books. A security vulnerability exists in markdown-it-py versions prior to v2.2.0, which stems from a denial of service that may result if an attacker is allowed to force null assertions using specially crafted input...

PT-2023-20601

Name of the Vulnerable Software and Affected Versions markdown-it-py versions prior to 2.2.0 Description A denial of service could be caused if an attacker is allowed to force null assertions with specially crafted input. Recommendations For versions prior to 2.2.0, update to version 2.2.0 or lat...

CVE-2023-26303: Improper Handling of Alternate Encoding

Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input...

markdown-it-py 安全漏洞

markdown-it-py is a Markdown parser open-sourced by Executable Books. A security vulnerability exists in markdown-it-py versions prior to v2.2.0, which stems from a denial of service that may result if an attacker is allowed to use invalid UTF-8 characters as input...

PT-2023-20600

Name of the Vulnerable Software and Affected Versions markdown-it-py versions prior to 2.2.0 Description Denial of service could be caused to the command line interface of markdown-it-py if an attacker was allowed to use invalid UTF-8 characters as input. Recommendations For versions prior to...

CVE-2023-26302: Improper Handling of Alternate Encoding

Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...

Regular Expression Denial Of Service (ReDoS)

markdown-it is vulnerable to regular expression denial of service DoS attacks. A malicious user is able to pass a crafted regex statement through the replace function in lib/common/htmlre.js, causing an application crash due to inefficient regular expression complexity...

GHSA-J5P7-JF4Q-742Q markdown-it vulnerable to Inefficient Regular Expression Complexity

A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/htmlre.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 3.0.0 is able to address this issue. The name of t...

markdown-it vulnerable to Inefficient Regular Expression Complexity

A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/htmlre.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 3.0.0 is able to address this issue. The name of t...

CVE-2015-10005

A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/htmlre.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 3.0.0 is able to address this issue. The name of t...

CVE-2015-10005

A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/htmlre.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 3.0.0 is able to address this issue. The name of t...

Design/Logic Flaw

A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/htmlre.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 3.0.0 is able to address this issue. The name of t...

UBUNTU-CVE-2015-10005

A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/htmlre.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 3.0.0 is able to address this issue. The name of t...

CVE-2015-10005 markdown-it html_re.js redos

A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/htmlre.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 3.0.0 is able to address this issue. The name of t...

CVE-2015-10005 markdown-it html_re.js redos

A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/htmlre.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 3.0.0 is able to address this issue. The name of t...

CVE-2015-10005

A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/htmlre.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 3.0.0 is able to address this issue. The name of t...

CVE-2015-10005

Affected software: markdown-it (up to 2.x). Vulnerability: REDOS in an unknown function of lib/common/html_re.js causing inefficient regular expression complexity. Root cause / impact: manipulation leads to performance concerns; lack of explicit exploitation details in the provided documents. Evi...

markitberry (>=1.0.0, <=1.0.1), mechanism-markdown (>=0.0.3, <=0.0.6) +2 more potentially affected by CVE-2015-10005 via markdown-it (>=2.1.3, <=2.2.1)

markdown-it NPM version =2.1.3, =1.0.0, =0.0.3, =1.0.0, =0.0.3, =0.0.5 Source cves: CVE-2015-10005 Source advisory: MEND:CVE-2015-10005...