What’s Vulnerable › Products

leandrocp mdex vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your leandrocp mdex version is affected

Latest leandrocp mdex vulnerabilities

• CVE-2026-54889 — Unsanitized URL schemes in MDEx Quill Delta output allow javascript: injection (XSS) (CVSS 5.1)
• CVE-2026-54888 — Uncontrolled recursion over deeply nested Markdown crashes the BEAM in mdex (CVSS 6.9)
• CVE-2026-53429 — Unbounded native memory leak in mdex escaped-tag rendering enables unauthenticated denial of service (CVSS 6.9)
• CVE-2026-53426 — Atom-table exhaustion denial-of-service via JSON parse_document in MDEx (CVSS 8.2)
• CVE-2026-53428 — Unbounded memory allocation in highlight_lines range expansion in mdex (CVSS 6.9)
• CVE-2026-53427 — Cross-site scripting in MDEx via unescaped highlight_lines_class code-fence attribute (CVSS 2.3)