384 matches found
myst-nb (0.8.5) potentially affected by CVE-2023-26302 via markdown-it-py (0.4.6)
markdown-it-py PYPI version 0.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on markdown-it-py and may be impacted: - myst-nb 0.8.5 Source cves: CVE-2023-26302 Source advisory: OSV:GHSA-JRWR-5X3P-HVC3...
benchmark-runner (>=1.0.148, <=1.0.217), c7n-sphinxext (>=1.1.13, <=1.1.16) +40 more potentially affected by CVE-2023-26302 via markdown-it-py (1.1.0)
markdown-it-py PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on markdown-it-py and may be impacted: - benchmark-runner =1.0.148, =1.1.13, =0.3.2rc3, =0.30.22, =0.1.0, =0.6.0, =0.1.0, =1.11.2, =0.2.2rc3, =0.12.0, =0.1.1, =0.7.5, =0.7.1...
markdown-it-py Denial of Service vulnerability in the command line interface
Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...
a2grunnerp (>=0.1.0, <=0.1.8), apidriver (>=0.4.0, <=0.9.5) +19 more potentially affected by CVE-2023-26302 via markdown-it-py (2.1.0)
markdown-it-py PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on markdown-it-py and may be impacted: - a2grunnerp =0.1.0, =0.4.0, =1.1.17, =0.0.1, =3.72.0, =2.2.0, =0.10.0, =2.2.0, =0.0.5, =0.24.0, =2022.1.4, =2022.2.5 - pyservicenow...
jupyter-book (0.7.5), mdformat (>=0.1.0, <=0.1.1) +1 more potentially affected by CVE-2023-26302 via markdown-it-py (0.4.9)
markdown-it-py PYPI version 0.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on markdown-it-py and may be impacted: - jupyter-book 0.7.5 - mdformat =0.1.0, =0.9.0, =0.11.2 Source cves: CVE-2023-26302 Source advisory: OSV:GHSA-JRWR-5X3P-HVC3...
GHSA-VRJV-MXR7-VJF8 markdown-it-py Denial of Service vulnerability
Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input...
markdown-it-py Denial of Service vulnerability
Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input...
auditnlg (0.0.1), chatty-goose (>=0.1.0, <=0.2.0) +8 more potentially affected by CVE-2023-26303 via markdown-it-py (0.5.8)
markdown-it-py PYPI version 0.5.8 is affected by a known vulnerability. The following packages have a transitive dependency on markdown-it-py and may be impacted: - auditnlg 0.0.1 - chatty-goose =0.1.0, =1.7.0rc1, =0.1.2, =0.0.1, =0.1.0, =0.12.0, =0.10.0, =1.7.1 - presc 0.1.2 Source cves:...
myst-nb (0.8.5) potentially affected by CVE-2023-26303 via markdown-it-py (0.4.6)
markdown-it-py PYPI version 0.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on markdown-it-py and may be impacted: - myst-nb 0.8.5 Source cves: CVE-2023-26303 Source advisory: OSV:GHSA-VRJV-MXR7-VJF8...
benchmark-runner (>=1.0.148, <=1.0.217), c7n-sphinxext (>=1.1.13, <=1.1.16) +40 more potentially affected by CVE-2023-26303 via markdown-it-py (1.1.0)
markdown-it-py PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on markdown-it-py and may be impacted: - benchmark-runner =1.0.148, =1.1.13, =0.3.2rc3, =0.30.22, =0.1.0, =0.6.0, =0.1.0, =1.11.2, =0.2.2rc3, =0.12.0, =0.1.1, =0.7.5, =0.7.1...
a2grunnerp (>=0.1.0, <=0.1.8), apidriver (>=0.4.0, <=0.9.5) +19 more potentially affected by CVE-2023-26303 via markdown-it-py (2.1.0)
markdown-it-py PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on markdown-it-py and may be impacted: - a2grunnerp =0.1.0, =0.4.0, =1.1.17, =0.0.1, =3.72.0, =2.2.0, =0.10.0, =2.2.0, =0.0.5, =0.24.0, =2022.1.4, =2022.2.5 - pyservicenow...
a2grunnerp (>=0.1.0, <=0.1.8), apidriver (>=0.4.0, <=0.9.5) +19 more potentially affected by CVE-2023-26303 via markdown-it-py (2.1.0)
markdown-it-py PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on markdown-it-py and may be impacted: - a2grunnerp =0.1.0, =0.4.0, =1.1.17, =0.0.1, =3.72.0, =2.2.0, =0.10.0, =2.2.0, =0.0.5, =0.24.0, =2022.1.4, =2022.2.5 - pyservicenow...
commanderbot-ext (0.7.0), jupyter-book (>=0.11.0a1, <=0.11.3) +11 more potentially affected by CVE-2023-26303 via markdown-it-py (0.6.2)
markdown-it-py PYPI version 0.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on markdown-it-py and may be impacted: - commanderbot-ext 0.7.0 - jupyter-book =0.11.0a1, =1.8.0, =0.0.0, =0.6.1, =0.2.0, =2.0.0, =0.4.0, =0.13.0, =0.13.7 - pycounts 0.4.0...
jupyter-book (0.7.5), mdformat (>=0.1.0, <=0.1.1) +1 more potentially affected by CVE-2023-26303 via markdown-it-py (0.4.9)
markdown-it-py PYPI version 0.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on markdown-it-py and may be impacted: - jupyter-book 0.7.5 - mdformat =0.1.0, =0.9.0, =0.11.2 Source cves: CVE-2023-26303 Source advisory: OSV:GHSA-VRJV-MXR7-VJF8...
CVE-2023-26303
Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input...
DEBIAN-CVE-2023-26303
Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input...
CVE-2023-26303
Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input...
jupyter-book (0.7.5), mdformat (>=0.1.0, <=0.1.1) +1 more potentially affected by CVE-2023-26303 via markdown-it-py (0.4.9)
markdown-it-py PYPI version 0.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on markdown-it-py and may be impacted: - jupyter-book 0.7.5 - mdformat =0.1.0, =0.9.0, =0.11.2 Source cves: CVE-2023-26303 Source advisory: OSV:PYSEC-2023-24...
