CVE-2020-11888

CVE-2020-11888 affects python-markdown2 up to version 2.3.8, where XSS is possible due to mishandling of element names (e.g., elementname@ or elementname- with an onclick attribute). The provided connected documents indicate that later updates (e.g., 2.3.9) include XSS fixes, and openSUSE/Fedora ...

CVE-2009-3724

CVE-2009-3724 affects the Python package markdown2 prior to version 1.0.1.14, with multiple cross-site scripting (XSS) issues reported across multiple sources. The vulnerability stems from insufficient input validation/escaping in the affected library, enabling attacker-controlled input to be ref...

CVE-2018-5773

The CVE-2018-5773 vulnerability affects python-markdown2 (markdown2) up to version 2.3.5, where safe_mode fails to properly escape input, enabling XSS with crafted payloads (e.g., missing final '>' in an IMG tag). Public fixes are documented in Fedora advisories for 2.3.7 (and related opensuse...