Nixpkgs Security Tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Dismissed
(browse all)
Permalink CVE-2023-26302
updated 10 months, 2 weeks ago by @LeSuisse Activity log
  • Created automatic suggestion 10 months, 3 weeks ago
  • @LeSuisse dismissed 10 months, 2 weeks ago
markdown-it-py CLI crash on invalid UTF-8 characters

Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input.

Affected products

markdown-it-py
  • <v2.2.0

Matching in nixpkgs

pkgs.python311Packages.markdown-it-py

Markdown parser in Python

pkgs.python312Packages.markdown-it-py

Markdown parser in Python

Package maintainers