← Back

Macdown

macdown

Vendor: Macdown Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-12173
1Macdown Project
1Macdown
Jun 17, 2026
May 18, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
MacDown 0.7.1 (870) allows remote code execution via a file:\\\ URI, with a .app pathname, in the HREF attribute of an A element. This is different from CVE-2019-12138.
CVE-2019-12138
1Macdown Project
1Macdown
Jun 17, 2026
May 16, 2019
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
MacDown 0.7.1 allows directory traversal, for execution of arbitrary programs, via a file:/// or ../ substring in a shared note.