CWE-173

Total CVEs
3
Vulnerabilities
Avg CVSS v3
5.4
Medium
Latest CVE
2024
Most Recent

Severity Distribution

Critical 0
0%
High 0
0%
Medium 3
100%
Low 0
0%

External References

MITRE CWE
Official CWE definition
NIST NVD
Search CVEs by CWE

All CVEs (3)

Page 1 of 1

CVE-2023-26303

MEDIUM
CVSS:5.5(Medium)

Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input.

CWE-1732023

CVE-2023-26302

MEDIUM
CVSS:5.5(Medium)

Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input.

CWE-1732023

CVE-2024-54158

MEDIUM
CVSS:5.3(Medium)

In JetBrains YouTrack before 2024.3.52635 potential spoofing attack was possible via lack of Punycode encoding

CWE-1732024