Macdown Project Macdown
2 CVEs affecting Macdown Project Macdown. Latest disclosed: 2019-05-18. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-12173 | High | 8.8 | 2019-05-18 | MacDown 0.7.1 (870) allows remote code execution via a file:\\\ URI, with a .app pathname, in the HREF attribute of an A element. This is different from CVE-20… |
CVE-2019-12138 | High | 7.8 | 2019-05-16 | MacDown 0.7.1 allows directory traversal, for execution of arbitrary programs, via a file:/// or ../ substring in a shared note. |