leandrocp mdex

• CVE-2026-53426 High 8.2 Atom-table exhaustion denial-of-service via JSON parse_document in MDEx 0.2%
• CVE-2026-54889 Medium 5.1 Unsanitized URL schemes in MDEx Quill Delta output allow javascript: injection (XSS) 0.4%
• CVE-2026-54888 Medium 6.9 Uncontrolled recursion over deeply nested Markdown crashes the BEAM in mdex 0.2%
• CVE-2026-53429 Medium 6.9 Unbounded native memory leak in mdex escaped-tag rendering enables unauthenticated denial of service 0.2%
• CVE-2026-53428 Medium 6.9 Unbounded memory allocation in highlight_lines range expansion in mdex 0.2%
• CVE-2026-53427 Low 2.3 Cross-site scripting in MDEx via unescaped highlight_lines_class code-fence attribute 0.7%