Lepture Mistune vulnerabilities

CVE-2026-44708 [MEDIUM] CWE-79 CVE-2026-44708: Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, the mistune math plu Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, the mistune math plugin renders inline math ($...$) and block math ($$...$$) by concatenating the raw user-supplied content directly into the HTML output without any HTML escaping. This occurs even when the parser is explicitly created with escape=True, which is supposed

CVE-2026-44896 [MEDIUM] CWE-79 CVE-2026-44896: Mistune is a Python Markdown parser with renderers and plugins. In 3.2.0 and earlier, in src/mistune Mistune is a Python Markdown parser with renderers and plugins. In 3.2.0 and earlier, in src/mistune/directives/image.py, the render_figure() function concatenates figclass and figwidth options directly into HTML attributes without escaping. This allows attribute injection and XSS even when HTMLRenderer(escape=True) is used, because these values bypa

CVE-2026-59926 [MEDIUM] CWE-79 CVE-2026-59926: Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, render_admonition() Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, render_admonition() in src/mistune/directives/admonition.py concatenates the Admonition directive :class: option into the HTML class attribute without escaping, allowing attribute injection and cross-site scripting even when HTMLRenderer escape mode is enabled. This issue

CVE-2026-115350 [MEDIUM] CWE-79 CVE-2026-115350: Mistune before 3.3.0 contains a cross-site scripting vulnerability in the Include directive that emi Mistune before 3.3.0 contains a cross-site scripting vulnerability in the Include directive that emits included .html, .xhtml, or .htm file content as raw block_html tokens. Attackers who can plant an HTML file readable by the renderer can reference it via an include directive, combined with path traversal, to execute stored scripts when escape=Fal

CVE-2026-115351 [MEDIUM] CWE-94 CVE-2026-115351: Mistune from 3.2.1 before 3.3.0 contains a CSS injection vulnerability that allows attackers control Mistune from 3.2.1 before 3.3.0 contains a CSS injection vulnerability that allows attackers controlling markdown input to inject arbitrary style declarations via the unvalidated figwidth option of the figure directive. Attackers can append declarations like background:url() to the rendered figure style attribute, forcing victim browsers to send re

CVE-2026-59930 [MEDIUM] CWE-345 CVE-2026-59930: Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the toc plugin and T Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the toc plugin and TableOfContents directive generate heading IDs as predictable toc_N values without slugifying the heading text, allowing attacker-controlled id="toc_N" content to collide with generated anchors and redirect same-page navigation, CSS selectors, or JavaS