Python-markdown2 Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Python-markdown2 Project records in CISA KEV

No Python-markdown2 Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Python-markdown2 · all components

TI-2020-09556 CVE-2020-11888 · GHSA-fv3h-8x5j-pvgq

LOW 31

python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01932 Published 2020-04-20 Fixed in 2.3.9 CWE-79

TI-2018-04175 CVE-2018-5773 · GHSA-p6h9-gw49-rqm4

LOW 29

An issue was discovered in markdown2 (aka python-markdown2) through 2.3.5.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00819 Published 2018-01-18 Fixed in 2.3.6 CWE-79

TI-2009-03548 CVE-2009-3724 · GHSA-72cx-5ff9-4hhc

LOW 29

python-markdown2 before 1.0.1.14 has multiple cross-site scripting (XSS) issues.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00766 Published 2020-01-15 Fixed in 1.0.1.14 CWE-79