52 matches found
EUVD-2023-0131
Malicious code in bioql PyPI...
EUVD-2023-0130
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2023-26302
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as...
Linux Distros Unpatched Vulnerability : CVE-2023-26303
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input...
Fedora: Security Advisory (FEDORA-2023-f970cbb557)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OPENSUSE-SU-2024:12772-1 python310-markdown-it-py-2.2.0-1.1 on GA media
These are all security issues fixed in the python310-markdown-it-py-2.2.0-1.1 package on the GA media of openSUSE Tumbleweed...
Fedora 39 : python-markdown-it-py (2023-f970cbb557)
The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-f970cbb557 advisory. Automatic update for python-markdown-it-py-2.2.0-1.fc39. Changelog Wed Mar 15 2023 Karolina Surma - 2.2.0-1 - Update to 2.2.0, includes the fix for...
Fedora: Security Advisory for python-markdown-it-py (FEDORA-2023-c3fb6d6b8d)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 37 Update: python-markdown-it-py-2.2.0-1.fc37
Markdown parser done right. Its features: Follows the CommonMark spec for baseline parsing. Has configurable syntax: you can add new rules and even replace existing ones. Pluggable: Adds syntax extensions to extend the parser. High speed & safe by default...
Fedora: Security Advisory for python-markdown-it-py (FEDORA-2023-8ff3ba5fb5)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 37 : python-markdown-it-py (2023-c3fb6d6b8d)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-c3fb6d6b8d advisory. Update to 2.2.0, includes the fix for CVE-2023-26302 Tenable has extracted the preceding description block directly from the Fedora security advisor...
Fedora 38 : python-markdown-it-py (2023-8ff3ba5fb5)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-8ff3ba5fb5 advisory. Update to 2.2.0, includes the fix for CVE-2023-26302 Tenable has extracted the preceding description block directly from the Fedora security advisor...
SUSE CVE-2023-26302
Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...
SUSE CVE-2023-26303
Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input...
CVE-2023-26303
A denial of service vulnerability exists in markdown-it-py.An attacker could craft a payload with null assertations as input resulting in a crash and availability of the component...
CVE-2023-26302
A denial of service vulnerability exists in markdown-it-py.An attacker could craft a payload with invalid UTF-8 characters as input to cause a crash thereby affecting the availability...
Denial Of Service (DoS)
markdown-it-py is vulnerable to Denial Of Service DoS. The vulnerability exists in the convertfile function of parse.py, which allows an attacker to cause an application crash by submitting invalid UTF-8 characters when using the CLI version of markdown-it-py...
markdown-it-py Denial of Service vulnerability in the command line interface
Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...
a2grunnerp (>=0.1.0 <=0.1.8), apidriver (>=0.4.0 <=0.9.5) +73 more potentially affected by CVE-2023-26302 via markdown-it-py (>=0.4.6 <=2.1.0)
markdown-it-py PYPI version =0.4.6, =0.1.0, =0.4.0, =1.0.148, =1.1.13, =0.1.0, =0.0.1, =3.72.0, =2.2.0, =0.10.0, =2.2.0, =0.0.5, =0.0.13 - gamesdb-api =0.3.1 and more Source cves: CVE-2023-26302 Source advisory: OSV:GHSA-JRWR-5X3P-HVC3...
GHSA-JRWR-5X3P-HVC3 markdown-it-py Denial of Service vulnerability in the command line interface
Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...