CVE-2020-11888

CVE-2020-11888 affects python-markdown2 up to version 2.3.8, where XSS is possible due to mishandling of element names (e.g., elementname@ or elementname- with an onclick attribute). The provided connected documents indicate that later updates (e.g., 2.3.9) include XSS fixes, and openSUSE/Fedora ...

CVE-2009-3724

CVE-2009-3724 affects the Python package markdown2 prior to version 1.0.1.14, with multiple cross-site scripting (XSS) issues reported across multiple sources. The vulnerability stems from insufficient input validation/escaping in the affected library, enabling attacker-controlled input to be ref...