CVE-2026-53429: mdex 0.11.0 to before 0.12.3; +1 more affected products

Affected technology

mdex · 0.11.0 to before 0.12.3
leandrocp

mdex · 81e4d14dd3aa5b206e395c7f372b9b413793015f to before 6ed94d905f97af188323f042698ae841c02293b4
leandrocp

mdex_native · 0.1.0 to before 0.2.3
leandrocp

mdex_native · 956528c5e31746253347029e810a969ab916fd27 to before cbd927fb5061b488de8d90a8ef6df65718ca1fe6
leandrocp

Component: 'Elixir.MDEx', comrak_nif, 'Elixir.MDExNative.Comrak', mdex_native_nif
Function: comrak_nif::document_to_html_with_options, 'Elixir.MDEx.Native':document_to_html_with_options/2, 'Elixir.MDEx':to_html/1, mdex_native_nif::document_to_html_with_options, 'Elixir.MDExNative.Native':document_to_html_with_options/2, 'Elixir.MDExNative.Comrak':document_to_html/2
File: native/comrak_nif/src/types/document.rs, native/mdex_native_nif/src/types/document.rs

Attack conditions (Source advisory, CVSS 4.0): Local · No privileges required · No user interaction required

What an attacker can do

The source reports that an attacker could disrupt service under the conditions described by the source. Source advisory’s CVSS 4.0 assessment (base score 6.9/10) rates confidentiality and integrity impact as none; availability impact as high.