CVE-2023-50447

Advisory

Mkdocs-material 9.5.5 includes a change in its dependency on Pillow. Previously set to approximately version 9.4, it has now been updated to version 10.22. This change was made in response to the security vulnerability identified as CVE-2023-504477.
https://github.com/squidfunk/mkdocs-material/commit/fe11bc0cabd692d37bc4cc4e8034dbe6783ef36b

Affected package

Affected versions

Fixed versions

Vulnerability changelog

- Updated Tagalog translations
- Updated Pillow to 10.2 to mitigate security vulnerabilities
- Improved resilience of instant navigation
- Fixed 6687: Updated Mermaid.js to version 10.7.0 (latest)
- Fixed 6652: Keyboard events in custom elements captured
- Fixed 6582: Instant navigation doesn't correctly handle alternate URLs
- Fixed 6565: Instant navigation doesn't allow for `onclick` handlers
- Fixed 6345: Instant navigation sometimes breaks browser back button
- Fixed 6334: Instant navigation doesn't correctly position anchors (Safari)
- Fixed 6275: Instant navigation doesn't correctly resolve after 404
- Fixed 6102: Instant navigation reloads page on same link navigation

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50447