# lepture mistune.

Every CVE that names lepture mistune among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Mistune before 3.3.3 Denial of Service via Balanced Bracket Link Parsing](https://agentprime.io/advisories/CVE-2026-121438.md)
  `CVE-2026-121438` · CVE record: lepture mistune · CVSS 6.9 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Denial of service
- [Mistune 3.3.0 before 3.3.4 Quadratic-Time DoS via \_process_emphasis_delimiters](https://agentprime.io/advisories/CVE-2026-121437.md)
  `CVE-2026-121437` · CVE record: lepture mistune · CVSS 8.7 High · Not analysed yet · Published 3 Nov 2026 · Tags: Denial of service
- [Mistune before 3.3.0 Arbitrary Local File Read via Include Directive](https://agentprime.io/advisories/CVE-2026-115354.md)
  `CVE-2026-115354` · CVE record: lepture mistune · CVSS 7.1 High · Not analysed yet · Published 22 Oct 2026 · Tags: Path traversal
- [Mistune before 3.3.0 Path Traversal via include Directive](https://agentprime.io/advisories/CVE-2026-115353.md)
  `CVE-2026-115353` · CVE record: lepture mistune · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Path traversal
- [Mistune before 3.3.0 Quadratic-Time DoS via Unmatched Brackets in Inline Parser](https://agentprime.io/advisories/CVE-2026-115352.md)
  `CVE-2026-115352` · CVE record: lepture mistune · CVSS 8.7 High · Not analysed yet · Published 22 Oct 2026 · Tags: Denial of service
- [Mistune 3.2.1 before 3.3.0 CSS Injection via Figure Directive figwidth Option](https://agentprime.io/advisories/CVE-2026-115351.md)
  `CVE-2026-115351` · CVE record: lepture mistune · CVSS 5.3 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Code injection
- [Mistune before 3.3.0 Stored XSS via Include Directive HTML Files](https://agentprime.io/advisories/CVE-2026-115350.md)
  `CVE-2026-115350` · CVE record: lepture mistune · CVSS 5.3 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Mistune 3.0.0 before 3.3.0 Denial of Service via Nested Bracket Parsing](https://agentprime.io/advisories/CVE-2026-115349.md)
  `CVE-2026-115349` · CVE record: lepture mistune · CVSS 8.7 High · Not analysed yet · Published 22 Oct 2026 · Tags: Denial of service
- [Mistune before 3.3.0 Quadratic-Time DoS via parse_link_text](https://agentprime.io/advisories/CVE-2026-115348.md)
  `CVE-2026-115348` · CVE record: lepture mistune · CVSS 8.7 High · Not analysed yet · Published 22 Oct 2026 · Tags: Denial of service
- [Mistune before 3.3.0 Quadratic Denial of Service via parse_link_text](https://agentprime.io/advisories/CVE-2026-115347.md)
  `CVE-2026-115347` · CVE record: lepture mistune · CVSS 8.7 High · Not analysed yet · Published 22 Oct 2026 · Tags: Denial of service

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=lepture-mistune>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/lepture-mistune/>. Everything for agents: <https://agentprime.io/llms.txt>.