MA
Product
Macdown
by Macdown Project · last CVE May 18, 2019
2
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch

Add Macdown to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-12173
8.8
4%
May 18
MacDown 0.7.1 (870) allows remote code execution via a file:\\\ URI, with a .app pathname, in the HREF attribute of an A element
Affected: 0.7.1
CVE-2019-12138
7.8
1%
May 16
MacDown 0.7.1 allows directory traversal, for execution of arbitrary programs, via a file:/// or ../ substring in a shared note
Affected: 0.7.1
Showing 2