Hex/mdex CVE-2026-53427: low 2.3, EPSS 0.69%
Cross-site scripting in MDEx via unescaped highlight_lines_class code-fence attribute
Action: Upgrade mdex to 0.12.3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.11.3 | 0.12.3 | - |
Fixed versions
| 0.12.3 |
Sources
- osv: EEF-CVE-2026-53427
- nvd: CVE-2026-53427
- https://github.com/leandrocp/mdex_native/security/advisories/GHSA-v664-pmxr-mxxx
- https://cna.erlef.org/cves/CVE-2026-53427.html
- https://github.com/leandrocp/mdex_native/commit/798a363b4339f6f7162ec8437c4c9f9b5ae6fbf3
- https://hex.pm/packages/mdex
- https://hex.pm/packages/mdex_native
CVE-2026-53427 · published · modified · JSON