Количество 6
Количество 6
CVE-2026-59923
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, HTMLRenderer.safe_url() does not block percent-encoded javascript URIs, allowing attacker-supplied Markdown links or images to bypass URL protections and execute script in rendered HTML. This issue is fixed in version 3.3.0.
CVE-2026-59923
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, HTMLRenderer.safe_url() does not block percent-encoded javascript URIs, allowing attacker-supplied Markdown links or images to bypass URL protections and execute script in rendered HTML. This issue is fixed in version 3.3.0.
CVE-2026-59923
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, HTMLRenderer.safe_url() does not block percent-encoded javascript URIs, allowing attacker-supplied Markdown links or images to bypass URL protections and execute script in rendered HTML. This issue is fixed in version 3.3.0.
CVE-2026-59923
Mistune is a Python Markdown parser with renderers and plugins. Prior ...
GHSA-8c25-4j27-2rv3
Mistune: XSS via percent-encoded javascript URI bypass in safe_url()
openSUSE-SU-2026:21339-1
Security update for python-mistune
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-59923 Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, HTMLRenderer.safe_url() does not block percent-encoded javascript URIs, allowing attacker-supplied Markdown links or images to bypass URL protections and execute script in rendered HTML. This issue is fixed in version 3.3.0. | CVSS3: 6.1 | 0% Низкий | 26 дней назад |
 | CVE-2026-59923 Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, HTMLRenderer.safe_url() does not block percent-encoded javascript URIs, allowing attacker-supplied Markdown links or images to bypass URL protections and execute script in rendered HTML. This issue is fixed in version 3.3.0. | CVSS3: 6.1 | 0% Низкий | 26 дней назад |
 | CVE-2026-59923 Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, HTMLRenderer.safe_url() does not block percent-encoded javascript URIs, allowing attacker-supplied Markdown links or images to bypass URL protections and execute script in rendered HTML. This issue is fixed in version 3.3.0. | CVSS3: 6.1 | 0% Низкий | 26 дней назад |
| CVE-2026-59923 Mistune is a Python Markdown parser with renderers and plugins. Prior ... | CVSS3: 6.1 | 0% Низкий | 26 дней назад |
| GHSA-8c25-4j27-2rv3 Mistune: XSS via percent-encoded javascript URI bypass in safe_url() | CVSS3: 6.1 | 0% Низкий | 14 дней назад |
 | openSUSE-SU-2026:21339-1 Security update for python-mistune | 20 дней назад |
Уязвимостей на страницу