Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: languages Tag: mistune Clear
ID Title
CVE-2026-59924 Path Traversal in mistune (CVE-2026-59924)
path traversal in mistune (CVE-2026-59924). Confidential information can be exposed externally. Exploitable via ``Include``. Mitigation: upgrade to `3.3.0` or later.
CVE-2026-59925 Vulnerability in mistune (CVE-2026-59925)
vulnerability in mistune (CVE-2026-59925). Risk of unauthorized operations or information disclosure. Exploitable via ``EMPHASIS_END_RE``. Mitigation: upgrade to `3.3.0` or later.
CVE-2026-59926 Cross-Site Scripting (XSS) in mistune (CVE-2026-59926)
cross-site scripting in mistune (CVE-2026-59926). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.3.0` or later.
CVE-2026-59927 Vulnerability in mistune (CVE-2026-59927)
vulnerability in mistune (CVE-2026-59927). Risk of unauthorized operations or information disclosure. Exploitable via ``Include``. Mitigation: upgrade to `3.3.0` or later.
CVE-2026-59928 Vulnerability in mistune (CVE-2026-59928)
vulnerability in mistune (CVE-2026-59928). Risk of unauthorized operations or information disclosure. Exploitable via ``ref_links``. Mitigation: upgrade to `3.3.0` or later.
CVE-2026-59929 Cross-Site Scripting (XSS) in mistune (CVE-2026-59929)
cross-site scripting in mistune (CVE-2026-59929). Risk of unauthorized operations or information disclosure. Exploitable via ``safe_url``. Mitigation: upgrade to `3.3.0` or later.
CVE-2026-59930 Vulnerability in mistune (CVE-2026-59930)
vulnerability in mistune (CVE-2026-59930). Risk of unauthorized operations or information disclosure. Exploitable via ``toc``. Mitigation: upgrade to `3.3.0` or later.
CVE-2026-59922 Vulnerability in mistune (CVE-2026-59922)
vulnerability in mistune (CVE-2026-59922). Risk of unauthorized operations or information disclosure. Exploitable via ``mark``. Mitigation: upgrade to `3.3.0` or later.
CVE-2026-59923 Cross-Site Scripting (XSS) in mistune (CVE-2026-59923)
cross-site scripting in mistune (CVE-2026-59923). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.3.0` or later.
CVE-2026-44899 Cross-Site Scripting (XSS) in mistune (CVE-2026-44899)
cross-site scripting in mistune (CVE-2026-44899). Risk of unauthorized operations or information disclosure. Exploitable via ``outline``. Mitigation: upgrade to `3.2.1` or later.
CVE-2026-44898 Cross-Site Scripting (XSS) in mistune (CVE-2026-44898)
cross-site scripting in mistune (CVE-2026-44898). Risk of unauthorized operations or information disclosure. Exploitable via ``text``. Mitigation: upgrade to `3.2.1` or later.
CVE-2026-44897 Cross-Site Scripting (XSS) in mistune (CVE-2026-44897)
cross-site scripting in mistune (CVE-2026-44897). Risk of unauthorized operations or information disclosure. Exploitable via ``toc_1``. Mitigation: upgrade to `3.2.1` or later.
CVE-2026-44896 Cross-Site Scripting (XSS) in mistune (CVE-2026-44896)
cross-site scripting in mistune (CVE-2026-44896). Risk of unauthorized operations or information disclosure. Exploitable via ``figclass``. Mitigation: upgrade to `3.2.1` or later.
CVE-2026-44708 Cross-Site Scripting (XSS) in mistune (CVE-2026-44708)
cross-site scripting in mistune (CVE-2026-44708). Risk of unauthorized operations or information disclosure. Exploitable via ``_escape``.
CVE-2017-15612 Cross-Site Scripting (XSS) in mistune-project (CVE-2017-15612)
cross-site scripting in mistune-project (CVE-2017-15612). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →