Skip to content
Sign in
7.8 High

CVE-2022-41709 Markdownify version 1.4.1 allows an external attacker to execute arbitrary code remotely on any client attempting to…

Description

Markdownify version 1.4.1 allows an external attacker to execute arbitrary code remotely on any client attempting to view a malicious markdown file through Markdownify. This is possible because the application has the "nodeIntegration" option enabled.

Affected products and versions

Product Affected versions Fixed in
Markdownify 1.4.1 No fix stated

Other CVEs of Markdownify

The 2 CVEs of Markdownify →
CVE-2022-41710 Markdownify version 1.4.1 allows an external attacker to remotely obtain arbitrary local files on any client that… 5.5 Medium
Track this CVE