Hex/mdex CVE-2026-54888: medium 6.9, EPSS 0.24%
Uncontrolled recursion over deeply nested Markdown crashes the BEAM in mdex
Action: Upgrade mdex to 0.12.3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.3.0 | 0.12.3 | - |
Fixed versions
| 0.12.3 |
Sources
- osv: EEF-CVE-2026-54888
- nvd: CVE-2026-54888
- https://github.com/leandrocp/mdex_native/security/advisories/GHSA-3w4f-53g2-f66p
- https://cna.erlef.org/cves/CVE-2026-54888.html
- https://github.com/leandrocp/mdex_native/commit/947696c47bc22bea5dffc0f78c946fa6b70ce183
- https://hex.pm/packages/mdex
- https://hex.pm/packages/mdex_native
CVE-2026-54888 · published · modified · JSON