mistune Cross-site scripting (XSS) vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2017-16876 · ADVISORY
• lepture/mistune commit 5f06d72 · WEB
• bugzilla.redhat.com/show_bug.cgi · WEB
• lepture/mistune · PACKAGE
• lepture/mistune · WEB
• pypa/advisory-database · WEB
• lists.fedoraproject.org/archives/list/[email protected]/message/NUR3GMHQBMA3UC4PFMCK6GCLOQC4LQQC · WEB
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NUR3GMHQBMA3UC4PFMCK6GCLOQC4LQQC
• lists.fedoraproject.org/archives/list/[email protected]/message/NUR3GMHQBMA3UC4PFMCK6GCLOQC4LQQC · WEB
• GitHub Advisory GHSA-98gj-wwxm-cj3h

mistune のその他の脆弱性

• CVE-2026-115355高 7.5Mistune before 3.3.0 contains a path traversal vulnerability in the Include directive that allows attackers to read arbitrary files by suppl…
• CVE-2026-76098高 7.5Mistune is a Python Markdown parser with renderers and plugins. Versions 3.3.0 through 3.3.2 are vulnerable to DoS through deeply nested tok…
• CVE-2026-59930中 4.3Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the toc plugin and TableOfContents directive generate headin…
• CVE-2026-59929中 6.1Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the safe_url filter in src/mistune/renderers/html.py blocks …
• CVE-2026-59928高 7.5Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a Markdown document containing many repeated or distinct ref…