Approved changes feed: RSS · Atom

cpe:2.3:a:matthewwithanm:markdownify:1.2.0:*:*:*:*:python:*:*

part: a version: 1.2.0 update: *

VendorMatthewwithanm (43712a3f-7aec-5e2a-a4fc-e187e9067b60)
ProductMarkdownify (06625a7f-3885-5b63-8ac4-4c1aa92443bf)
Edition*
Language*
Software edition*
Target softwarepython
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-47837 vulnerable 2026-06-08 05:38:07.765561 Markdownify 1.2.0 - Persistent Cross-Site Scripting
HIGH (7.2)
Markdownify 1.2.0 contains a persistent cross-site scripting vulnerability that allows attackers to store malicious payloads within markdown files. Attackers can upload crafted markdown files with embedded scripts that execute when the file is opened, potentially enabling remote code execution.
Published: 2026-01-16T19:09:36.840Z
Updated: 2026-03-05T01:28:49.731Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.