Parsedown

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Parsedown records in CISA KEV

No Parsedown vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Parsedown 2 records LOW

Records

2 records

TI-2019-08126 CVE-2019-10905 · GHSA-62m3-fc7f-jpp8

Parsedown before 1.7.2, when safe mode is used and HTML markup is disabled, might allow…

LOW 38

Parsedown before 1.7.2, when safe mode is used and HTML markup is disabled, might allow attackers to execute arbitrary JavaScript code if a script (already running on the affected page) executes the contents of any eleme…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.01469 Published 2019-04-06 Fixed in 1.7.2 CWE-79

TI-2018-15813 CVE-2018-1000162 · GHSA-qgpv-86r3-87fh

Parsedown version prior to 1.7.0 contains a Cross Site Scripting (XSS) vulnerability in…

LOW 30

Parsedown version prior to 1.7.0 contains a Cross Site Scripting (XSS) vulnerability in `setMarkupEscaped` for escaping HTML that can result in JavaScript code execution.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01159 Published 2018-04-18 Fixed in 1.7.0 CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0