PYSEC-2020-235

2020-01-1521:15:00

Google

osv.dev

0.001 Low

EPSS

Percentile

32.8%

JSON

python-markdown2 before 1.0.1.14 has multiple cross-site scripting (XSS) issues.

CPENameOperatorVersion
markdown2eq1.0.1.13
markdown2eq1.0.1.11
markdown2eq1.0.1.12
markdown2eq1.0.1.9
markdown2eq1.0.1.6
markdown2eq1.0.1.10
markdown2eq1.0.1.7
markdown2eq1.0.1.8

Name	Operator	Version
markdown2	eq	1.0.1.13
markdown2	eq	1.0.1.11
markdown2	eq	1.0.1.12
markdown2	eq	1.0.1.9
markdown2	eq	1.0.1.6
markdown2	eq	1.0.1.10
markdown2	eq	1.0.1.7
markdown2	eq	1.0.1.8

References

github.com/advisories/GHSA-72cx-5ff9-4hhc

snyk.io/vuln/SNYK-PYTHON-PYRAD-40000

www.openwall.com/lists/oss-security/2009/10/29/5

0.001 Low

EPSS

Percentile

32.8%

JSON

Related for OSV:PYSEC-2020-235