{"action":"Upgrade markdown2 to 2.3.6 or later.","affected":[{"fixed":"2.3.6","introduced":"0"}],"component":"markdown2","cve_ids":["CVE-2018-5773"],"ecosystem":"PyPI","epss":0.00819,"exploited":false,"fixed_versions":["2.3.6"],"ghsa_id":"GHSA-p6h9-gw49-rqm4","id":"tcs_01M5KFSFSA9EFSF7HS2GH94XHT","modified_at":"2024-09-30T17:23:16.991720Z","published_at":"2018-07-12T20:29:21Z","references":["https://osv.dev/vulnerability/GHSA-p6h9-gw49-rqm4","https://nvd.nist.gov/vuln/detail/CVE-2018-5773","https://github.com/google/osv/issues/430","https://github.com/trentm/python-markdown2/issues/285","https://github.com/trentm/python-markdown2/pull/303","https://github.com/trentm/python-markdown2/commit/1b1dcdd727c0ef03453b9f5ef5ae3679f1d72323","https://github.com/advisories/GHSA-p6h9-gw49-rqm4","https://github.com/pypa/advisory-database/tree/main/vulns/markdown2/PYSEC-2018-13.yaml","https://github.com/trentm/python-markdown2","https://github.com/trentm/python-markdown2/blob/master/CHANGES.md#python-markdown2-236"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-p6h9-gw49-rqm4","url":"https://osv.dev/vulnerability/GHSA-p6h9-gw49-rqm4"}],"summary":"markdown2 is vulnerable to cross-site scripting"}