Описание
Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input.
A denial of service vulnerability exists in markdown-it-py.An attacker could craft a payload with null assertations as input resulting in a crash and availability of the component
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Ansible Automation Platform 2 | ansible-lint | Affected | ||
| Red Hat Ansible Automation Platform 2 | ansible-navigator | Affected | ||
| Red Hat Ansible Automation Platform 2 | python3x-ansible-compat | Affected | ||
| Red Hat Ansible Automation Platform 2 | python-ansible-compat | Affected |
Показывать по
Дополнительная информация
Статус:
5.5 Medium
CVSS3
Связанные уязвимости
Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input.
Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input.
Denial of service could be caused to markdown-it-py, before v2.2.0, if ...
5.5 Medium
CVSS3