Most recent entries from all

CVE-2020-11888

2026-09-30T22:32:16.433392+00:00

python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute.

GHSA-fv3h-8x5j-pvgq — XSS in python-markdown2

2026-09-30T22:32:16.433469+00:00

Affected: PyPI: markdown2

python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute.

PYSEC-2020-65

2026-09-30T22:32:16.433501+00:00

Affected: PyPI: markdown2

python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute.