—
PYSEC-2023-24
Quick fix
PYSEC-2023-24 — markdown-it-py: upgrade to the fixed version with the command below.
pip install --upgrade 'markdown-it-py>=ae03c6107dfa18e648f6fdd1280f5b89092d5d49'Details
Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI/markdown-it-py
Introduced in:
0Fixed in: ae03c6107dfa18e648f6fdd1280f5b89092d5d49Fix
pip install --upgrade 'markdown-it-py>=ae03c6107dfa18e648f6fdd1280f5b89092d5d49'