TI-2026-39661 CVE-2026-54888
Uncontrolled recursion over deeply nested Markdown crashes the BEAM in mdex
Priority MEDIUM 64
Uncontrolled Recursion vulnerability in leandrocp mdex allows denial of service via deeply nested Markdown input.
Vulnerabilities
4 records
Release: leandrocp mdex, mdex, mdex_native 0.12.3, 0.2.3, 6ed94d905f97af188323f042698ae841c02293b4 Clear all filters
TI-2026-38511 CVE-2026-53429
Unbounded native memory leak in mdex escaped-tag rendering enables unauthenticated denial of service
Priority MEDIUM 64
Missing Release of Memory after Effective Lifetime vulnerability in leandrocp mdex and mdex_native allows an attacker who controls a rendered document to cause a denial of service through unbounded native memory exhausti…
Priority LOW 30
Memory Allocation with Excessive Size Value vulnerability in leandrocp mdex allows an unauthenticated attacker to cause a denial of service through unbounded memory allocation.
TI-2026-38509 CVE-2026-53427
Cross-site scripting in MDEx via unescaped highlight_lines_class code-fence attribute
Priority LOW 13
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in leandrocp MDEx allows stored or reflected cross-site scripting via attacker-controlled Markdown.