Skip to content
OpenAdvisories

Package · Ubuntu

python-markdown

2 known vulnerabilities.

2 results · Feed

  • High 7.5

    Python-Markdown 3.0 through 3.11.2 Denial of Service via Link Bracket Parsing

    Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerability in inline link parsing that allows remote attackers to exhaust CPU through unmatched brackets. Attackers can submit short Markdown containing repeated [ or ![ characters, forc…

  • Medium 5.3

    PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path

    PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. In versions up to and including 10.21.3, the b64 extension is vulnerable to a path traversal that discloses arbitrary files: it inlines images referenced by <img src="..."> by…