| Package | Affected versions | Patched versions |
|---|---|---|
| macdown | = 0.7.1 |
MacDown 0.7.1 (870) allows remote code execution via a file:\\\ URI, with a .app pathname, in the HREF attribute of an A element. This is different from CVE-2019-12138.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free