Packages

mdex_native

0.2.11
0.2.11 0.2.10 0.2.9 0.2.8 0.2.7 0.2.6 0.2.5 0.2.4 0.2.3 0.2.2 0.2.1 0.2.0 0.1.5 0.1.4 0.1.3 0.1.2 0.1.1 0.1.0

Markdown Elixir Native: Comrak, Ammonia, Lumis, and Syntect

HexDocs Report package

Current section

4 Advisories

Jump to
Documentation
Changelog
License
18 Versions
2 Dependencies
2 Dependants
4 Advisories
Files
Activity
EEF-CVE-2026-54888 CVE-2026-54888 GHSA-3w4f-53g2-f66p

Uncontrolled recursion over deeply nested Markdown crashes the BEAM in mdex

June 29, 2026
CVSS
?
6.9 / 10.0 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Versions

>= 0.1.0 and < 0.2.3
EEF-CVE-2026-53429 CVE-2026-53429 GHSA-cmvp-gp9f-23xw

Unbounded native memory leak in mdex escaped-tag rendering enables unauthenticated denial of service

June 29, 2026
CVSS
?
6.9 / 10.0 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Versions

>= 0.1.0 and < 0.2.3
EEF-CVE-2026-53428 CVE-2026-53428 GHSA-j93q-9cvj-rxfm

Unbounded memory allocation in highlight_lines range expansion in mdex

June 29, 2026
CVSS
?
6.9 / 10.0 Medium
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H

Affected Versions

>= 0.1.0 and < 0.2.3
EEF-CVE-2026-53427 CVE-2026-53427 GHSA-v664-pmxr-mxxx

Cross-site scripting in MDEx via unescaped highlight_lines_class code-fence attribute

June 29, 2026
CVSS
?
2.3 / 10.0 Low
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

Affected Versions

>= 0.1.0 and < 0.2.3

Checksum

Dependency Config

mix.exs

rebar.config

Gleam

erlang.mk

Package Details

Downloads Last 30 days, all versions
0 5K 10K 15K 20K

this version

427

yesterday

8 148

last 7 days

90 868

all time

739 244

Last Updated

Oct 04, 2026

License

MIT

Build Tools

mix

Publisher

leandrocp leandrocp

Links

Owners