Skip to content

Vendor

python-markdown2 project vulnerabilities

3 published CVES affecting python-markdown2 project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
0
Medium
3
Low
0
Unscored
0
CISA KEV
0
Atom feed of python-markdown2 project alerts

Products

Latest python-markdown2 project CVEs

Newest publication first

  1. CVE-2020-11888 XSS in python-markdown2

    Published
    MediumCVSS 6.1

    python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute.

  3. CVE-2018-5773 markdown2 is vulnerable to cross-site scripting

    Published
    MediumCVSS 6.1

    An issue was discovered in markdown2 (aka python-markdown2) through 2.3.5. The safe_mode feature, which is supposed to sanitize user input against XSS, is flawed and does not escape the input properly. With a crafted payload, XSS can be triggered, as demonstrated by omitting the...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.