Lucene search
+L

1 matches found

OSV
OSV
added 2026/06/29 7:11 p.m.7 views

CVE-2026-53426 Atom-table exhaustion denial-of-service via JSON parse_document in MDEx

Allocation of Resources Without Limits or Throttling vulnerability in leandrocp MDEx allows Excessive Allocation. MDEx.parsedocument/2 accepts a :json, json source. In lib/mdex.ex, the private jsontonode/1 function passes the attacker-controlled nodetype value to Module.concat/1, which calls...

8.2CVSS6AI score0.00126EPSS
SaveExploits0References9
Rows per page
Query Builder