financial-deep-research
Warn
Audited by Socket on Sep 20, 2026
1 alert found:
AnomalyAnomalyscripts/md_to_html.py
LOWAnomalyLOW
scripts/md_to_html.py
This is a Markdown-to-HTML conversion utility with no evident malware or supply-chain attack behavior. Its main security issue is unsafe HTML generation: unescaped Markdown and insufficiently escaped bibliography URLs can permit XSS or HTML attribute injection when untrusted input is rendered. Use an established Markdown sanitizer or escape input and validate URLs before embedding them in HTML.
Confidence: 97%Severity: 58%
Audit Metadata