Skip to main content
cve.nowby Sazabi
← Hex
HexPackage

mdex_native

4 known vulnerabilities (3 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 3 medium, 1 low
Registry
Hex

Advisories 4

  • CVE-2026-54888Medium 6.9

    Uncontrolled recursion over deeply nested Markdown crashes the BEAM in mdex

    Affected: from 0.1.0, fixed in 0.2.3; from 0.1.0, fixed in 0.2.3.

  • CVE-2026-53429Medium 6.9

    Unbounded native memory leak in mdex escaped-tag rendering enables unauthenticated denial of service

    Affected: from 0.1.0, fixed in 0.2.3; from 0.1.0, fixed in 0.2.3.

  • CVE-2026-53428Medium 6.9

    Unbounded memory allocation in highlight_lines range expansion in mdex

    Affected: from 0.1.0, fixed in 0.2.3; from 0.1.0, fixed in 0.2.3.

  • Cross-site scripting in MDEx via unescaped highlight_lines_class code-fence attribute

    Affected: from 0.1.0, fixed in 0.2.3; from 0.1.0, fixed in 0.2.3.