Cross-site scripting in markdown2 for python

2022-04-2101:54:03

Google

osv.dev

0.001 Low

EPSS

Percentile

32.8%

JSON

python-markdown2 before 1.0.1.14 has multiple cross-site scripting (XSS) issues.

CPENameOperatorVersion
markdown2eq1.0.1.10
markdown2eq1.0.1.8
markdown2eq1.0.1.11
markdown2eq1.0.1.13
markdown2eq1.0.1.7
markdown2eq1.0.1.12
markdown2eq1.0.1.6
markdown2eq1.0.1.9

Name	Operator	Version
markdown2	eq	1.0.1.10
markdown2	eq	1.0.1.8
markdown2	eq	1.0.1.11
markdown2	eq	1.0.1.13
markdown2	eq	1.0.1.7
markdown2	eq	1.0.1.12
markdown2	eq	1.0.1.6
markdown2	eq	1.0.1.9

References

github.com/advisories/GHSA-72cx-5ff9-4hhc

github.com/pypa/advisory-database/tree/main/vulns/markdown2/PYSEC-2020-235.yaml

github.com/trentm/python-markdown2

nvd.nist.gov/vuln/detail/CVE-2009-3724

snyk.io/vuln/SNYK-PYTHON-PYRAD-40000

www.openwall.com/lists/oss-security/2009/10/29/5

0.001 Low

EPSS

Percentile

32.8%

JSON

Related for OSV:GHSA-72CX-5FF9-4HHC