CVE-2022-41709

Published: 2022-10-19T17:15Z

Last Modified: 2024-11-21T07:23Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Markdownify version 1.4.1 allows an external attacker to execute arbitrary code remotely on any client attempting to view a malicious markdown file through Markdownify. This is possible because the application has the "nodeIntegration" option enabled. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt