Skip to main content
VulnerabilityPublished Updated

markdown-to-html (NuGet) · Malicious Code

Affects markdown-to-htmlSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 20 Jul 2026, 19:55 UTC

What to do

Affected software

ProductAffectedFixed in
NuGetmarkdown-to-htmlpkg:nuget/markdown-to-htmlOther threatsAffected
  • =1.0.0
  • =1.0.30
  • =1.0.32
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Avoid using the affected versions (=1.0.0, =1.0.30, =1.0.32) of the markdown-to-html package. Monitor official sources for updates or advisories regarding remediation.

Description

The markdown-to-html NuGet package versions 1.0.0, 1.0.30, and 1.0.32 contain malicious code. This is a supply chain threat where the package itself is compromised to include harmful functionality. No CVSS score or detailed technical exploitation information is provided.

References

Community reviews

Loading reviews…