Vulnerabilities > CVE-2023-26302 - Unspecified vulnerability in Executablebooks Markdown-It-Py

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

executablebooks

NVD

Published: 2023-02-22

Updated: 2023-11-07

Summary

Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input.

Vulnerable Configurations

Part	Description	Count
Application	Executablebooks Executablebooks Markdown IT PY 0.1.0 Executablebooks Markdown IT PY 0.1.1 Executablebooks Markdown IT PY 0.1.1A Executablebooks Markdown IT PY 0.1.1B Executablebooks Markdown IT PY 0.1.1C Executablebooks Markdown IT PY 0.1.1D Executablebooks Markdown IT PY 0.2.0 Executablebooks Markdown IT PY 0.2.1 Executablebooks Markdown IT PY 0.2.2 Executablebooks Markdown IT PY 0.2.3 Executablebooks Markdown IT PY 0.3.0 Executablebooks Markdown IT PY 0.3.1 Executablebooks Markdown IT PY 0.3.2 Executablebooks Markdown IT PY 0.3.3 Executablebooks Markdown IT PY 0.4.0 Executablebooks Markdown IT PY 0.4.1 Executablebooks Markdown IT PY 0.4.2 Executablebooks Markdown IT PY 0.4.3 Executablebooks Markdown IT PY 0.4.4 Executablebooks Markdown IT PY 0.4.5 Executablebooks Markdown IT PY 0.4.6 Executablebooks Markdown IT PY 0.4.7 Executablebooks Markdown IT PY 0.4.8 Executablebooks Markdown IT PY 0.4.9 Executablebooks Markdown IT PY 0.5.0 Executablebooks Markdown IT PY 0.5.1 Executablebooks Markdown IT PY 0.5.2 Executablebooks Markdown IT PY 0.5.3 Executablebooks Markdown IT PY 0.5.4 Executablebooks Markdown IT PY 0.5.5 Executablebooks Markdown IT PY 0.5.6 Executablebooks Markdown IT PY 0.5.7 Executablebooks Markdown IT PY 0.5.8 Executablebooks Markdown IT PY 0.6.0 Executablebooks Markdown IT PY 0.6.1 Executablebooks Markdown IT PY 0.6.2 Executablebooks Markdown IT PY 1.0.0 Executablebooks Markdown IT PY 1.0.0B1 Executablebooks Markdown IT PY 1.0.0B2 Executablebooks Markdown IT PY 1.0.0B3 Executablebooks Markdown IT PY 1.1.0 Executablebooks Markdown IT PY 2.0.0 Executablebooks Markdown IT PY 2.0.1 Executablebooks Markdown IT PY 2.1.0	44

References

https://github.com/executablebooks/markdown-it-py/commit/53ca3e9c2b9e9b295f6abf7f4ad2730a9b70f68c