OASB
Attacks/Parser Differential/PARSE-003
CRITICALCWE-79

PARSE-003 Markdown Fence Escape

Parser Differential: Exploits differences in how parsers (JSON, YAML, markdown) interpret the same input to bypass security controls

Description

Escapes markdown code fences to inject executable content that renders differently across parsers

Remediation

Sanitize all markdown output before rendering. Never pass markdown through multiple parsers with different fence handling. Strip HTML from markdown in agent responses.

Severity

CRITICAL

OASB Control

3.1

CWE

CWE-79