Markdownify vulnerabilities
We track 1 vulnerability in Markdownify products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 19, 2022.
1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score
Latest Markdownify vulnerabilities
- 7.8 High severity
Markdownify: Inclusion of Functionality from Untrusted Control Sphere
Markdownify version 1.4.1 allows an external attacker to execute arbitrary code remotely on any client attempting to view a malicious markdown file through Markdownify. This is possible because the application has the "nodeIntegration" option enabled.