Python-markdown2 Project - vulnerabilities (CVEs)

4 CVEs in 1 products, 1 in the last 30 days, newest from 2026-10-28.

Products

• Python-markdown2 - 4 CVEs

Newest CVEs of Python-markdown2 Project

• CVE-2026-118694 - CVSS 8.7 (high), 2026-10-28: python-markdown2 through 2.5.5 contains a denial of service vulnerability that allows remote users to exhaust CPU by submitting Markdown with unclosed inline…
• CVE-2020-11888 - CVSS 6.1 (medium), 2020-04-20: python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or…
• CVE-2009-3724 - CVSS 6.1 (medium), 2020-01-15: python-markdown2 before 1.0.1.14 has multiple cross-site scripting (XSS) issues.
• CVE-2018-5773 - CVSS 6.1 (medium), 2018-01-18: An issue was discovered in markdown2 (aka python-markdown2) through 2.3.5. The safe_mode feature, which is supposed to sanitize user input against XSS, is…