CVE-2026-53426: mdex 0.4.3 to before 0.13.2

Affected technology

mdex · 0.4.3 to before 0.13.2
leandrocp

mdex · cbb59a3f792dbc343873adec3466f49c853dc309 to before 00fddf444220a1f1cc0af0a1cab6738804878387
leandrocp

Component: 'Elixir.MDEx'
Function: 'Elixir.MDEx':parse_document/2, 'Elixir.MDEx':json_to_node/1, passes
File: lib/mdex.ex

Attack conditions (Source advisory, CVSS 4.0): Local · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 4.0 assessment (base score 8.2/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.