lepture vulnerabilities

Newest CVEs

• CVE-2026-121438

  Mistune before 3.3.3 Denial of Service via Balanced Bracket Link Parsing

  lepture · mistune

  Medium6.9
• CVE-2026-121437

  Mistune 3.3.0 before 3.3.4 Quadratic-Time DoS via _process_emphasis_delimiters

  lepture · mistune

  High8.7
• CVE-2026-115355

  Mistune before 3.3.0 Path Traversal and XSS via Include Directive

  lepture · mistune

  High8.7
• CVE-2026-115354

  Mistune before 3.3.0 Arbitrary Local File Read via Include Directive

  lepture · mistune

  High7.1
• CVE-2026-115353

  Mistune before 3.3.0 Path Traversal via include Directive

  lepture · mistune

  Critical9.2
• CVE-2026-115352

  Mistune before 3.3.0 Quadratic-Time DoS via Unmatched Brackets in Inline Parser

  lepture · mistune

  High8.7
• CVE-2026-115351

  Mistune 3.2.1 before 3.3.0 CSS Injection via Figure Directive figwidth Option

  lepture · mistune

  Medium5.3
• CVE-2026-115350

  Mistune before 3.3.0 Stored XSS via Include Directive HTML Files

  lepture · mistune

  Medium5.3
• CVE-2026-115349

  Mistune 3.0.0 before 3.3.0 Denial of Service via Nested Bracket Parsing

  lepture · mistune

  High8.7
• CVE-2026-115348

  Mistune before 3.3.0 Quadratic-Time DoS via parse_link_text

  lepture · mistune

  High8.7