← Back

Markdownify Project

markdownify_project

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Markdownify
markdownify
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-41710
1Markdownify Project
1Markdownify
Jun 17, 2026
Nov 3, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Markdownify version 1.4.1 allows an external attacker to remotely obtain arbitrary local files on any client that attempts to view a malicious markdown file through Markdownify. This is possible because the application d...Show more
Markdownify version 1.4.1 allows an external attacker to remotely obtain arbitrary local files on any client that attempts to view a malicious markdown file through Markdownify. This is possible because the application does not have a CSP policy (or at least not strict enough) and/or does not properly validate the contents of markdown files before rendering them.Show less
CVE-2022-41709
1Markdownify Project
1Markdownify
Jun 17, 2026
Oct 19, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Markdownify version 1.4.1 allows an external attacker to execute arbitrary code remotely on any client attempting to view a malicious markdown file through Markdownify. This is possible because the application has the "n...Show more
Markdownify version 1.4.1 allows an external attacker to execute arbitrary code remotely on any client attempting to view a malicious markdown file through Markdownify. This is possible because the application has the "nodeIntegration" option enabled.Show less