CVE-2023-26303
Low
Published: 23 February 2023
Published
23 February 2023
Modified
25 February 2026
KEV Added
—
Patch
—
CVSS Score v3.1
3.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
EPSS Score
0.0014
33.5th percentile
Risk Priority
7
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2023-26303 is a low-severity Improper Handling of Alternate Encoding (CWE-173) vulnerability in Executablebooks Markdown-It-Py. Its CVSS base score is 3.3 (Low).
Operationally, ranked at the 33.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-0131
Vulnerability details
Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
executablebooks
markdown-it-py
≤ 2.2.0
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.