{"action":"Upgrade markdown2 to 1.0.1.14 or later.","affected":[{"fixed":"1.0.1.14","introduced":"0"}],"component":"markdown2","cve_ids":["CVE-2009-3724"],"ecosystem":"PyPI","epss":0.00766,"exploited":false,"fixed_versions":["1.0.1.14"],"ghsa_id":"GHSA-72cx-5ff9-4hhc","id":"tcs_01M5KF4JXBG8J76Z20NW0MAEN7","modified_at":"2024-09-30T17:01:01.298140Z","published_at":"2022-04-21T01:54:03Z","references":["https://osv.dev/vulnerability/GHSA-72cx-5ff9-4hhc","https://nvd.nist.gov/vuln/detail/CVE-2009-3724","https://github.com/advisories/GHSA-72cx-5ff9-4hhc","https://github.com/pypa/advisory-database/tree/main/vulns/markdown2/PYSEC-2020-235.yaml","https://github.com/trentm/python-markdown2","https://snyk.io/vuln/SNYK-PYTHON-PYRAD-40000","https://www.openwall.com/lists/oss-security/2009/10/29/5"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-72cx-5ff9-4hhc","url":"https://osv.dev/vulnerability/GHSA-72cx-5ff9-4hhc"}],"summary":"Cross-site scripting in markdown2 for python"}