mdex vulnerabilities

1 known vulnerability in mdex from Leandrocp. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  mdex: Allocation of Resources Without Limits or Throttling

  CVE-2026-53426Jun 29, 2026Leandrocp

  Allocation of Resources Without Limits or Throttling vulnerability in leandrocp MDEx allows Excessive Allocation. MDEx.parse_document/2 accepts a {:json, json} source. In lib/mdex.ex, the private json_to_node/1 function passes the attacker-controlled node_type