Hex/mdex CVE-2026-53429: medium 6.9, EPSS 0.19%
Unbounded native memory leak in mdex escaped-tag rendering enables unauthenticated denial of service
Action: Upgrade mdex to 0.12.3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.11.0 | 0.12.3 | - |
Fixed versions
| 0.12.3 |
Sources
- osv: EEF-CVE-2026-53429
- nvd: CVE-2026-53429
- https://github.com/leandrocp/mdex_native/security/advisories/GHSA-cmvp-gp9f-23xw
- https://cna.erlef.org/cves/CVE-2026-53429.html
- https://github.com/leandrocp/mdex_native/commit/cbd927fb5061b488de8d90a8ef6df65718ca1fe6
- https://hex.pm/packages/mdex
- https://hex.pm/packages/mdex_native
CVE-2026-53429 · published · modified · JSON