← All advisories

Medium severity6.1NVD Advisory· Published Jan 15, 2020· Updated Jun 16, 2026

CVE-2009-3724

CVE-2009-3724

Description

python-markdown2 before 1.0.1.14 has multiple cross-site scripting (XSS) issues.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
markdown2PyPI	< 1.0.1.14	1.0.1.14

Affected products

3

Python Markdown2/Python Markdown2v5
Range: before 1.0.1.14
ghsa-coords
pkg:pypi/markdown2
Range: < 1.0.1.14
Python Markdown2 Project/Python Markdown2
cpe:2.3:a:python-markdown2_project:python-markdown2:*:*:*:*:*:*:*:*
Range: <1.0.1.14

Patches

Vulnerability mechanics

References

5

www.openwall.com/lists/oss-security/2009/10/29/5nvdExploitMailing ListPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-72cx-5ff9-4hhcghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2009-3724ghsaADVISORY
snyk.io/vuln/SNYK-PYTHON-PYRAD-40000nvdThird Party AdvisoryWEB
github.com/pypa/advisory-database/tree/main/vulns/markdown2/PYSEC-2020-235.yamlghsaWEB

News mentions

0

No linked articles in our index yet.