Login Request a demo
PA
Product
Parsedown
by Parsedown · last CVE Apr 6, 2019
2
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 0High 1Medium 1Low 0
Severity
All severities2Critical0High1Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Parsedown to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-10905
8.1
1%
Apr 6
Parsedown before 1.7.2, when safe mode is used and HTML markup is disabled, might allow attackers to execute arbitrary JavaScript code if a script (already running on the affected…
Affected: before 1.7.2
CVE-2018-1000162
6.1
1%
Apr 18
Parsedown version prior to 1.7.0 contains a Cross Site Scripting (XSS) vulnerability in `setMarkupEscaped` for escaping HTML that can result in JavaScript code execution
Affected: before 1.7.0
Showing 2