212 matches found
Infinite loop
Overview org.webjars.bower:markdown-it is a modern pluggable markdown parser. Affected versions of this package are vulnerable to Infinite loop in linkify inline rule when using malformed input. Remediation A fix was pushed into the master branch but not yet published. References - GitHub Diff -...
Fedora 39 : python-markdown-it-py (2023-f970cbb557)
The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-f970cbb557 advisory. Automatic update for python-markdown-it-py-2.2.0-1.fc39. Changelog Wed Mar 15 2023 Karolina Surma - 2.2.0-1 - Update to 2.2.0, includes the fix for...
Fedora: Security Advisory for python-markdown-it-py (FEDORA-2023-c3fb6d6b8d)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 37 Update: python-markdown-it-py-2.2.0-1.fc37
Markdown parser done right. Its features: Follows the CommonMark spec for baseline parsing. Has configurable syntax: you can add new rules and even replace existing ones. Pluggable: Adds syntax extensions to extend the parser. High speed & safe by default...
Fedora: Security Advisory for python-markdown-it-py (FEDORA-2023-8ff3ba5fb5)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 37 : python-markdown-it-py (2023-c3fb6d6b8d)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-c3fb6d6b8d advisory. Update to 2.2.0, includes the fix for CVE-2023-26302 Tenable has extracted the preceding description block directly from the Fedora security advisor...
Fedora 38 : python-markdown-it-py (2023-8ff3ba5fb5)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-8ff3ba5fb5 advisory. Update to 2.2.0, includes the fix for CVE-2023-26302 Tenable has extracted the preceding description block directly from the Fedora security advisor...
SUSE CVE-2023-26303
Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input...
SUSE CVE-2023-26302
Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...
CVE-2023-26303
A denial of service vulnerability exists in markdown-it-py.An attacker could craft a payload with null assertations as input resulting in a crash and availability of the component...
CVE-2023-26302
A denial of service vulnerability exists in markdown-it-py.An attacker could craft a payload with invalid UTF-8 characters as input to cause a crash thereby affecting the availability...
Denial Of Service (DoS)
markdown-it-py is vulnerable to Denial Of Service DoS. The vulnerability exists in the convertfile function of parse.py, which allows an attacker to cause an application crash by submitting invalid UTF-8 characters when using the CLI version of markdown-it-py...
GHSA-JRWR-5X3P-HVC3 markdown-it-py Denial of Service vulnerability in the command line interface
Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...
markdown-it-py Denial of Service vulnerability in the command line interface
Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...
markdown-it-py Denial of Service vulnerability
Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input...
GHSA-VRJV-MXR7-VJF8 markdown-it-py Denial of Service vulnerability
Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input...
CVE-2023-26303
Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input...
CVE-2023-26303
Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input...
