Python-markdown2 Project
Python-markdown2 Project Python-markdown2: vulnerabilidades y CVE
Python-markdown2 Project Python-markdown2 tiene 3 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE3
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2020-11888 | Media (6.1) | 1.9% | — | 20 abr 2020 | python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute. |
| CVE-2009-3724 | Media (6.1) | 0.77% | — | 15 ene 2020 | python-markdown2 before 1.0.1.14 has multiple cross-site scripting (XSS) issues. |
| CVE-2018-5773 | Media (6.1) | 0.82% | — | 18 ene 2018 | An issue was discovered in markdown2 (aka python-markdown2) through 2.3.5. The safe_mode feature, which is supposed to sanitize user input against XSS, is flawed and does not escape the input properly. With a crafted… |