Vulnerabilities

TI-2019-08126 CVE-2019-10905 · GHSA-62m3-fc7f-jpp8

Parsedown before 1.7.2, when safe mode is used and HTML markup is disabled, might allow…

LOW 38

Parsedown before 1.7.2, when safe mode is used and HTML markup is disabled, might allow attackers to execute arbitrary JavaScript code if a script (already running on the affected page) executes the contents of any eleme…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.01469 Published 2019-04-06 Fixed in 1.7.2 CWE-79

TI-2018-15813 CVE-2018-1000162 · GHSA-qgpv-86r3-87fh

Parsedown version prior to 1.7.0 contains a Cross Site Scripting (XSS) vulnerability in…

LOW 30

Parsedown version prior to 1.7.0 contains a Cross Site Scripting (XSS) vulnerability in `setMarkupEscaped` for escaping HTML that can result in JavaScript code execution.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01159 Published 2018-04-18 Fixed in 1.7.0 CWE-79

Vulnerabilities

Filters

Parsedown before 1.7.2, when safe mode is used and HTML markup is disabled, might allow…

Parsedown version prior to 1.7.0 contains a Cross Site Scripting (XSS) vulnerability in…