← Database

CVE-2022-41709

HIGH CVSS: 7.8 Published: 2022-10-19 Modified: 2026-06-17

Description

Markdownify version 1.4.1 allows an external attacker to execute arbitrary code remotely on any client attempting to view a malicious markdown file through Markdownify. This is possible because the application has the "nodeIntegration" option enabled.

Affected Platforms

Markdownify Project Markdownify

Weakness Type

NVD-CWE-noinfo, CWE-829

References