Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2856▼ 331 respecto a la semana anterior

Críticas / altas1383▼ 38 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)292▼ 217 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2021-26813	Modificada	Alta (7.5)	2.2%	—	Markdown2 Project Markdown2 Fedoraproject Fedora	3/3/2021	17/6/2026	markdown2 >=1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of service vulnerability. If an attacker provides a malicious string, it can make markdown2 processing difficult or delayed for an extended period of time.
CVE-2020-11888	Modificada	Media (6.1)	1.9%	—	Python-markdown2 Project Python-markdown2	20/4/2020	17/6/2026	python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute.
CVE-2009-3724	Modificada	Media (6.1)	0.77%	—	Python-markdown2 Project Python-markdown2	15/1/2020	16/6/2026	python-markdown2 before 1.0.1.14 has multiple cross-site scripting (XSS) issues.
CVE-2018-5773	Modificada	Media (6.1)	0.82%	—	Python-markdown2 Project Python-markdown2	18/1/2018	17/6/2026	An issue was discovered in markdown2 (aka python-markdown2) through 2.3.5. The safe_mode feature, which is supposed to sanitize user input against XSS, is flawed and does not escape the input properly. With a crafted payload, XSS can be triggered, as demonstrated by omitting the final '>' character from an IMG tag.