Package · Ubuntu

python-markdown2

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.1

CVE-2020-11888

XSS in python-markdown2

python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute.

markdown2 python-markdown2 python-markdown2 Debian Ubuntu PyPI

Apr 20, 2020