Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:39454
HistoryFeb 28, 2023 - 2:47 a.m.

Denial Of Service (DoS)

2023-02-2802:47:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
markdown-it-py
denial of service
vulnerability
convert_file
parse.py
utf-8
cli
application crash

EPSS

0

Percentile

13.3%

markdown-it-py is vulnerable to Denial Of Service (DoS). The vulnerability exists in the convert_file function of parse.py, which allows an attacker to cause an application crash by submitting invalid UTF-8 characters when using the CLI version of markdown-it-py.