Markdownify Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Markdownify Project records in CISA KEV

No Markdownify Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Markdownify 2 records HIGH

Records

2 records in Markdownify · all components

TI-2022-20101 CVE-2022-41709 · GHSA-c942-mfmp-p4fh

Markdownify version 1.4.1 allows an external attacker to execute arbitrary code remotely…

HIGH 69

Markdownify version 1.4.1 allows an external attacker to execute arbitrary code remotely on any client attempting to view a malicious markdown file through Markdownify.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0048 Published 2022-10-19 No fix listed CWE-829

TI-2022-20102 CVE-2022-41710 · GHSA-qqhf-xfhw-7884

Markdownify version 1.4.1 allows an external attacker to remotely obtain arbitrary local…

MEDIUM 58

Markdownify version 1.4.1 allows an external attacker to remotely obtain arbitrary local files on any client that attempts to view a malicious markdown file through Markdownify.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00391 Published 2022-11-03 No fix listed CWE-552

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0