MacDownApp/macdown

MacDownApp/macdown

GitHubGitHub
GitHubgithub.com
macdown.uranusjr.commacdown.uranusjr.com
Releases37
Frequency1 month 3 weeks
Last Release
Stars9.8K
Open source Markdown editor for macOS.
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2019-12173NVD↗
= 0.7.1—6.8 MEDIUM

MacDown 0.7.1 (870) allows remote code execution via a file:\\\ URI, with a .app pathname, in the HREF attribute of an A element. This is different from CVE-2019-12138.

CVE-2019-12138NVD↗
= 0.7.1—4.6 MEDIUM

MacDown 0.7.1 allows directory traversal, for execution of arbitrary programs, via a file:/// or ../ substring in a shared note.