PyPI/markdown2 CVE-2018-5773: unknown, EPSS 0.82%

An issue was discovered in markdown2 (aka python-markdown2) through 2.3.5. The safe_mode feature, which is supposed to sanitize user input against XSS, is flawed and does not escape the input properly

Action: Upgrade markdown2 to 2.3.6 or later.

pip install markdown2==2.3.6

Affected

Fixed versions

Sources

• osv: PYSEC-2018-13
• https://github.com/trentm/python-markdown2/issues/285
• https://github.com/advisories/GHSA-p6h9-gw49-rqm4

CVE-2018-5773 · published 2018-01-18T21:29:00Z · modified 2023-11-08T04:00:20.840570Z · JSON