{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.4.1"}],"component":"electron-markdownify","cve_ids":["CVE-2022-41709"],"ecosystem":"npm","epss":0.0048,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-c942-mfmp-p4fh","id":"tcs_01M5KFJ7B3T87HZ3Q8YCTMH2FE","modified_at":"2025-05-08T22:10:51Z","published_at":"2022-10-19T19:00:17Z","references":["https://osv.dev/vulnerability/GHSA-c942-mfmp-p4fh","https://nvd.nist.gov/vuln/detail/CVE-2022-41709","https://fluidattacks.com/advisories/adams","https://github.com/amitmerchant1990/electron-markdownify"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-c942-mfmp-p4fh","url":"https://osv.dev/vulnerability/GHSA-c942-mfmp-p4fh"}],"summary":"Markdownify subject to Remote Code Execution via malicious markdown file"}