Mistune Project Mistune vulnerabilities
3 known vulnerabilities affecting mistune_project/mistune.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2022-34749HIGHCVSS 7.5≤ 2.0.22022-07-25
CVE-2022-34749 [HIGH] CWE-1333 CVE-2022-34749: In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that
In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking.
ghsanvdosv
CVE-2017-16876MEDIUMCVSS 6.1fixed in 0.8.12017-12-29
CVE-2017-16876 [MEDIUM] CWE-79 CVE-2017-16876: Cross-site scripting (XSS) vulnerability in the _keyify function in mistune.py in Mistune before 0.8
Cross-site scripting (XSS) vulnerability in the _keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument.
ghsanvdosv
CVE-2017-15612MEDIUMCVSS 6.1v0.7.42017-10-19
CVE-2017-15612 [MEDIUM] CWE-79 CVE-2017-15612: mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline (such as in java\nscript:) or a cra
mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline (such as in java\nscript:) or a crafted email address, related to the escape and autolink functions.
ghsanvdosv