Skip to content
OpenAdvisories

Package · PyPI

markdown2

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2020-11888

    XSS in python-markdown2

    python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute.

    markdown2 python-markdown2 python-markdown2 Debian Ubuntu PyPI
  • Medium 6.1
    CVE-2009-3724

    Cross-site scripting in markdown2 for python

    python-markdown2 before 1.0.1.14 has multiple cross-site scripting (XSS) issues.

    python-markdown2 python-markdown2 markdown2 PyPI
  • Medium 6.1
    CVE-2018-5773

    markdown2 is vulnerable to cross-site scripting

    An issue was discovered in markdown2 (aka python-markdown2) through 2.3.5. The safe_mode feature, which is supposed to sanitize user input against XSS, is flawed and does not escape the input properly. With a crafted payload, XSS can be triggered, as demonstr…

    markdown2 PyPI