Security update for python-mistune (moderate)

openSUSE security update: security update for python-mistune ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21339-1 Rating: moderate References: bsc1271082 bsc1271117 bsc1271119 bsc1271121 bsc1271125 bsc1271127 bsc1271128 bsc1271131 bsc1271132...

CVE-2026-44896

A flaw was found in Mistune, a Python Markdown parser. This vulnerability allows a remote attacker to inject malicious code into web pages, leading to Cross-Site Scripting XSS. The issue arises from the renderfigure function, which improperly handles figclass and figwidth options by directly...

CVE-2026-44896 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

SUSE CVE-2026-44896

Mistune is a Python Markdown parser with renderers and plugins. In 3.2.0 and earlier, in src/mistune/directives/image.py, the renderfigure function concatenates figclass and figwidth options directly into HTML attributes without escaping. This allows attribute injection and XSS even when...