Lucene search

K
osvGoogleOSV:CVE-2017-16876
HistoryDec 29, 2017 - 3:29 p.m.

CVE-2017-16876

2017-12-2915:29:00
Google
osv.dev
9

EPSS

0.001

Percentile

49.1%

Cross-site scripting (XSS) vulnerability in the _keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the “key” argument.