CVE-2023-26302

CVE-2023-26302 affects markdown-it-py prior to 2.2.0, where the command-line interface can experience a denial of service when fed invalid UTF-8 input. The connected Fedora advisories and Nessus/OpenVAS entries confirm the vulnerability in python-markdown-it-py and indicate that updates exist (2....

CVE-2023-26303

CVE-2023-26303 affects markdown-it-py before v2.2.0. The vulnerability allows a denial of service when an attacker forces null assertions via specially crafted input. Affected: markdown-it-py (Python). Root cause: handling of null assertions leading to DoS. Impact per sources indicates availabili...