Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cwe Tag: mistune Clear
ID Title
CVE-2026-59924 Path Traversal in mistune (CVE-2026-59924)
path traversal in mistune (CVE-2026-59924). Confidential information can be exposed externally. Exploitable via ``Include``. Mitigation: upgrade to `3.3.0` or later.
CVE-2026-59926 Cross-Site Scripting (XSS) in mistune (CVE-2026-59926)
cross-site scripting in mistune (CVE-2026-59926). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.3.0` or later.
CVE-2026-59927 Vulnerability in mistune (CVE-2026-59927)
vulnerability in mistune (CVE-2026-59927). Risk of unauthorized operations or information disclosure. Exploitable via ``Include``. Mitigation: upgrade to `3.3.0` or later.
CVE-2026-59929 Cross-Site Scripting (XSS) in mistune (CVE-2026-59929)
cross-site scripting in mistune (CVE-2026-59929). Risk of unauthorized operations or information disclosure. Exploitable via ``safe_url``. Mitigation: upgrade to `3.3.0` or later.
CVE-2026-59923 Cross-Site Scripting (XSS) in mistune (CVE-2026-59923)
cross-site scripting in mistune (CVE-2026-59923). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.3.0` or later.
CVE-2026-44899 Cross-Site Scripting (XSS) in mistune (CVE-2026-44899)
cross-site scripting in mistune (CVE-2026-44899). Risk of unauthorized operations or information disclosure. Exploitable via ``outline``. Mitigation: upgrade to `3.2.1` or later.
CVE-2026-44898 Cross-Site Scripting (XSS) in mistune (CVE-2026-44898)
cross-site scripting in mistune (CVE-2026-44898). Risk of unauthorized operations or information disclosure. Exploitable via ``text``. Mitigation: upgrade to `3.2.1` or later.
CVE-2026-44897 Cross-Site Scripting (XSS) in mistune (CVE-2026-44897)
cross-site scripting in mistune (CVE-2026-44897). Risk of unauthorized operations or information disclosure. Exploitable via ``toc_1``. Mitigation: upgrade to `3.2.1` or later.
CVE-2026-44896 Cross-Site Scripting (XSS) in mistune (CVE-2026-44896)
cross-site scripting in mistune (CVE-2026-44896). Risk of unauthorized operations or information disclosure. Exploitable via ``figclass``. Mitigation: upgrade to `3.2.1` or later.
CVE-2026-44708 Cross-Site Scripting (XSS) in mistune (CVE-2026-44708)
cross-site scripting in mistune (CVE-2026-44708). Risk of unauthorized operations or information disclosure. Exploitable via ``_escape``.
CVE-2017-16876 Cross-Site Scripting (XSS) in mistune-project (CVE-2017-16876)
cross-site scripting in mistune-project (CVE-2017-16876). Risk of unauthorized operations or information disclosure.
CVE-2017-15612 Cross-Site Scripting (XSS) in mistune-project (CVE-2017-15612)
cross-site scripting in mistune-project (CVE-2017-15612). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →