Nixpkgs Security Tracker

Login with GitHub

⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Dismissed

Permalink CVE-2023-26303

updated 10 months, 2 weeks ago by @LeSuisse Activity log

Created automatic suggestion 10 months, 3 weeks ago
@LeSuisse dismissed 10 months, 2 weeks ago

markdown-it-py crash on null assertions

Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input.

Affected products

markdown-it-py

<v2.2.0

Matching in nixpkgs

pkgs.python311Packages.markdown-it-py

Markdown parser in Python

nixos-unstable 3.0.0
- nixpkgs-unstable 3.0.0
- nixos-unstable-small 3.0.0

pkgs.python312Packages.markdown-it-py

Markdown parser in Python

nixos-unstable 3.0.0
- nixpkgs-unstable 3.0.0
- nixos-unstable-small 3.0.0

Package maintainers

@bhipple Benjamin Hipple <bhipple@protonmail.com>