MacDown Project MacDown 0.7.1
Approved changes feed: RSS · Atom
cpe:2.3:a:macdown_project:macdown:0.7.1:*:*:*:*:*:*:*part: a version: 0.7.1 update: *
| Vendor | Macdown Project (91bca4ed-f575-58b1-92b4-aed53e3692fd) |
|---|---|
| Product | Macdown (c19a0658-5de5-563b-b9d2-b49aa911931d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/macdownapp/macdown |
purl2cpe | 2026-06-01 10:17:49.471837 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-12173 |
vulnerable | 2026-06-08 05:12:38.637531 |
Details available
MacDown 0.7.1 (870) allows remote code execution via a file:\\\ URI, with a .app pathname, in the HREF attribute of an A element. This is different from CVE-2019-12138.
Published: 2019-05-17T22:30:23.000Z
Updated: 2024-08-04T23:10:30.900Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12138 |
vulnerable | 2026-06-08 05:12:38.595933 |
Details available
MacDown 0.7.1 allows directory traversal, for execution of arbitrary programs, via a file:/// or ../ substring in a shared note.
Published: 2019-05-16T13:21:06.000Z
Updated: 2024-08-04T23:10:30.598Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.