{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-29T22:52:03.792","vulnerabilities":[{"cve":{"id":"CVE-2022-41709","sourceIdentifier":"help@fluidattacks.com","published":"2022-10-19T17:15:09.653","lastModified":"2026-06-17T05:03:41.017","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Markdownify version 1.4.1 allows an external attacker to execute arbitrary code remotely on any client attempting to view a malicious markdown file through Markdownify. This is possible because the application has the \"nodeIntegration\" option enabled."},{"lang":"es","value":"Markdownify versión 1.4.1, permite a un atacante externo ejecutar código arbitrario de forma remota en cualquier cliente que intente visualizar un archivo markdown malicioso mediante de Markdownify. Esto es posible porque la aplicación presenta habilitada la opción \"nodeIntegration\""}],"affected":[{"source":"help@fluidattacks.com","affectedData":[{"vendor":"n/a","product":"Markdownify","versions":[{"version":"1.4.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-05-08T20:03:25.606579Z","id":"CVE-2022-41709","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-829"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:markdownify_project:markdownify:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1D9AE5BF-9687-42C3-A6A0-A894817CD36A"}]}]}],"references":[{"url":"https://fluidattacks.com/advisories/adams/","source":"help@fluidattacks.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://github.com/amitmerchant1990/electron-markdownify","source":"help@fluidattacks.com","tags":["Third Party Advisory"]},{"url":"https://fluidattacks.com/advisories/adams/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://github.com/amitmerchant1990/electron-markdownify","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}}]}