Cross-site Scripting in Mistune

Description

References

• nvd.nist.gov/vuln/detail/CVE-2017-15612 · ADVISORY
• lepture/mistune#140 · WEB
• lepture/mistune commit d6f0b64 · WEB
• GitHub Advisory GHSA-hpv5-v8g5-c864 · ADVISORY
• lepture/mistune · PACKAGE
• pypa/advisory-database · WEB

mistune의 다른 취약점

• CVE-2026-115355높음 7.5Mistune before 3.3.0 contains a path traversal vulnerability in the Include directive that allows attackers to read arbitrary files by suppl…
• CVE-2026-76098높음 7.5Mistune is a Python Markdown parser with renderers and plugins. Versions 3.3.0 through 3.3.2 are vulnerable to DoS through deeply nested tok…
• CVE-2026-59930보통 4.3Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the toc plugin and TableOfContents directive generate headin…
• CVE-2026-59929보통 6.1Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the safe_url filter in src/mistune/renderers/html.py blocks …
• CVE-2026-59928높음 7.5Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a Markdown document containing many repeated or distinct ref…