CVE-2023-26302
Low
Published: 22 February 2023
Published
22 February 2023
Modified
25 February 2026
KEV Added
—
Patch
—
CVSS Score v3.1
3.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
EPSS Score
0.0015
35.1th percentile
Risk Priority
7
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2023-26302 is a low-severity Improper Handling of Alternate Encoding (CWE-173) vulnerability in Executablebooks Markdown-It-Py. Its CVSS base score is 3.3 (Low).
Operationally, ranked at the 35.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-0130
Vulnerability details
Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
executablebooks
markdown-it-py
≤ 2.2.0
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.