CVE-2009-3724: Improper Neutralization of Input During Web Page Generation

python-markdown2 before 1.0.1.14 has multiple cross-site scripting XSS issues...

PT-2020-7059

Name of the Vulnerable Software and Affected Versions python-markdown2 versions prior to 1.0.1.14 Description The issue concerns multiple cross-site scripting XSS problems. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, potentially...

Fedora Update for python-markdown2 FEDORA-2019-095c760511

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 29 : python-markdown2 (2019-095c760511)

python-markdown2 2.3.7 - pull 306 Drop support for legacy Python versions - pull 307 Fix syntax highlighting test cases that depend on Pygments output - pull 308 Add support for Python 3.7 - pull 304 Add Wheel package support - pull 312 Fix tocdepth initialization regression - pull 315 XSS fix No...

Fedora 28 : python-markdown2 (2019-a16e1127d3)

python-markdown2 2.3.7 - pull 306 Drop support for legacy Python versions - pull 307 Fix syntax highlighting test cases that depend on Pygments output - pull 308 Add support for Python 3.7 - pull 304 Add Wheel package support - pull 312 Fix tocdepth initialization regression - pull 315 XSS fix No...

[SECURITY] Fedora 28 Update: python-markdown2-2.3.7-1.fc28

Markdown is a text-to-HTML filter; it translates an easy-to-read / easy-to-write structured text format into HTML. Markdown's text format is most similar to that of plain text email, and supports features such as headers, emphasis, code blocks, blockquotes, and links. This is a fast and complete...

Fedora Update for python-markdown2 FEDORA-2019-a16e1127d3

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 28 : python-markdown2 (2018-dd98177cad)

python-markdown2 2.3.6 - pull 282 Add TOC depth option - pull 283 Fix to add TOC html to output via CLI - pull 284 Do not remove anchors in safemode - pull 288 fixing cuddled-lists with a single list item - pull 292 Fix Wrong rendering of last list element - pull 295 link-patterns fix - pull 300...

Fedora 29 : python-markdown2 (2018-6a8028084d)

python-markdown2 2.3.6 - pull 282 Add TOC depth option - pull 283 Fix to add TOC html to output via CLI - pull 284 Do not remove anchors in safemode - pull 288 fixing cuddled-lists with a single list item - pull 292 Fix Wrong rendering of last list element - pull 295 link-patterns fix - pull 300...

Fedora Update for python-markdown2 FEDORA-2018-e52160d0bc

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for python-markdown2 FEDORA-2018-dd98177cad

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 27 : python-markdown2 (2018-e52160d0bc)

python-markdown2 2.3.6 - pull 282 Add TOC depth option - pull 283 Fix to add TOC html to output via CLI - pull 284 Do not remove anchors in safemode - pull 288 fixing cuddled-lists with a single list item - pull 292 Fix Wrong rendering of last list element - pull 295 link-patterns fix - pull 300...

[SECURITY] Fedora 29 Update: python-markdown2-2.3.6-1.fc29

Markdown is a text-to-HTML filter; it translates an easy-to-read / easy-to-write structured text format into HTML. Markdown's text format is most similar to that of plain text email, and supports features such as headers, emphasis, code blocks, blockquotes, and links. This is a fast and complete...

markdown2 is vulnerable to cross-site scripting

An issue was discovered in markdown2 aka python-markdown2 through 2.3.5. The safemode feature, which is supposed to sanitize user input against XSS, is flawed and does not escape the input properly. With a crafted payload, XSS can be triggered, as demonstrated by omitting the final character from...

aequitas (>=0.26.0, <=0.42.0), django-name (2.0.0) +3 more potentially affected by CVE-2018-5773 via markdown2 (>=2.3.0, <=2.3.5)

markdown2 PYPI version =2.3.0, =0.26.0, =0.0.1, =0.4.3, =4.2.0, =5.5.5 Source cves: CVE-2018-5773 Source advisory: OSV:GHSA-P6H9-GW49-RQM4...

aequitas (>=0.26.0, <=0.42.0), django-name (2.0.0) +3 more potentially affected by CVE-2018-5773 via markdown2 (>=2.3.0, <=2.3.5)

markdown2 PYPI version =2.3.0, =0.26.0, =0.0.1, =0.4.3, =4.2.0, =5.5.5 Source cves: CVE-2018-5773 Source advisory: GHSA-P6H9-GW49-RQM4...

markdown2 cross-site scripting vulnerability

markdown2 a.k.a. python-markdown2 is a lightweight markup language implemented in Python, developed by American software developer John Gruber John Gruber, which supports the conversion of plain-text formatted documents into valid XHTML or HTML documents. A cross-site scripting vulnerability exis...

CVE-2018-5773

An issue was discovered in markdown2 aka python-markdown2 through 2.3.5. The safemode feature, which is supposed to sanitize user input against XSS, is flawed and does not escape the input properly. With a crafted payload, XSS can be triggered, as demonstrated by omitting the final '' character...

aequitas (>=0.26.0, <=0.42.0), django-name (2.0.0) +3 more potentially affected by CVE-2018-5773 via markdown2 (>=2.3.0, <=2.3.5)

markdown2 PYPI version =2.3.0, =0.26.0, =0.0.1, =0.4.3, =4.2.0, =5.5.5 Source cves: CVE-2018-5773 Source advisory: OSV:PYSEC-2018-13...

CVE-2018-5773

An issue was discovered in markdown2 aka python-markdown2 through 2.3.5. The safemode feature, which is supposed to sanitize user input against XSS, is flawed and does not escape the input properly. With a crafted payload, XSS can be triggered, as demonstrated by omitting the final '' character...