CVE-2026-115351

A flaw was found in mistune. A remote attacker with control over markdown content can cause information disclosure by performing Cascading Style Sheets CSS injection through the unvalidated figwidth option in the figure directive. By inserting arbitrary style rules into rendered web pages, the...