Advisories · Technology
lepture mistune.
Every CVE that names lepture mistune among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
Mistune before 3.3.3 Denial of Service via Balanced Bracket Link Parsing
- lepture mistune
- Denial of service
- CVSS 8.7 High
Mistune 3.3.0 before 3.3.4 Quadratic-Time DoS via _process_emphasis_delimiters
- lepture mistune
- Denial of service
- CVSS 7.1 High
Mistune before 3.3.0 Arbitrary Local File Read via Include Directive
- lepture mistune
- Path traversal
- CVSS 9.2 CriticalCritical · CVSS 9+
Mistune before 3.3.0 Path Traversal via include Directive
- lepture mistune
- Path traversal
- CVSS 8.7 High
Mistune before 3.3.0 Quadratic-Time DoS via Unmatched Brackets in Inline Parser
- lepture mistune
- Denial of service
- CVSS 5.3 Medium
Mistune 3.2.1 before 3.3.0 CSS Injection via Figure Directive figwidth Option
- lepture mistune
- Code injection
- CVSS 5.3 Medium
Mistune before 3.3.0 Stored XSS via Include Directive HTML Files
- lepture mistune
- Cross-site scripting (XSS)
- CVSS 8.7 High
Mistune 3.0.0 before 3.3.0 Denial of Service via Nested Bracket Parsing
- lepture mistune
- Denial of service
- CVSS 8.7 High
Mistune before 3.3.0 Quadratic-Time DoS via parse_link_text
- lepture mistune
- Denial of service
- CVSS 8.7 High
Mistune before 3.3.0 Quadratic Denial of Service via parse_link_text
- lepture mistune
- Denial of service