Skip to content
OpenAdvisories

Package · Hex

mdex

6 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.2

    Atom-table exhaustion denial-of-service via JSON parse_document in MDEx

    Allocation of Resources Without Limits or Throttling vulnerability in leandrocp MDEx allows Excessive Allocation. MDEx.parse_document/2 accepts a {:json, json} source. In lib/mdex.ex, the private json_to_node/1 function passes the attacker-controlled node_typ…