Security: lepture/mistune
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Mistune Image Directive CSS Injection VulnerabilityGHSA-ccfx-mfmx-2fx9 published
May 12, 2026 by leptureModerate -
Mistune TOC Anchor Injection XSSGHSA-6269-cqxg-mhhv published
May 12, 2026 by leptureModerate -
Mistune Heading ID Attribute Injection XSSGHSA-v87v-83h2-53w7 published
May 6, 2026 by leptureModerate -
Mistune Math Plugin XSS Escape BypassGHSA-8g87-j6q8-g93x published
May 6, 2026 by leptureModerate -
ReDoS in LINK_TITLE_RE allows denial of service via crafted Markdown inputGHSA-8mp2-v27r-99xp published
May 6, 2026 by leptureHigh -
Denial-of-Service (DoS) vulnerabilityGHSA-hjph-f4mc-wx4c published
May 6, 2026 by leptureHigh -
XSS via unescaped figclass/figwidth in Figure directiveGHSA-58cw-g322-p94v published
May 6, 2026 by leptureModerate