489 matches found
CVE-2022-34749
In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking...
CVE-2022-34749
In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking...
mistune 安全漏洞
mistune is a fast and powerful Python Markdown parser from the individual developer Hsiaoming Yang. A security vulnerability exists in mistune 2.0.2 and earlier versions, which stems from the fact that its support for inline markup is implemented through the use of regular expressions, which may...
CVE-2022-34749
CVE-2022-34749 affects Mistune
Regular Expression Denial Of Service (ReDoS)
py3-mistune is vulnerable to regular expression denial of service. An attacker is able crash the system by injecting a maliciously crafted string into ASTERISKEMPHASIS...
CVE-2017-15612
mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline such as in java\nscript: or a crafted email address, related to the escape and autolink functions...
GHSA-HPV5-V8G5-C864 Cross-site Scripting in Mistune
mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline such as in java\nscript: or a crafted email address, related to the escape and autolink functions...
Cross-site Scripting in Mistune
mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline such as in java\nscript: or a crafted email address, related to the escape and autolink functions...
CVE-2022-34749 affecting package python-mistune for versions less than 0.8.3-5
CVE-2022-34749 affecting package python-mistune for versions less than 0.8.3-5. A patched version of the package is available...
Mageia: Security Advisory (MGASA-2018-0066)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-34749 affecting package python-mistune 0.8.3-3
CVE-2022-34749 affecting package python-mistune 0.8.3-3. A patched version of the package is available...
mistune Cross-site scripting (XSS) vulnerability
Cross-site scripting XSS vulnerability in the keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument...
GHSA-98GJ-WWXM-CJ3H mistune Cross-site scripting (XSS) vulnerability
Cross-site scripting XSS vulnerability in the keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument...
openSUSE Security Update : python-mistune (openSUSE-2018-148)
This update for python-mistune to version 0.8.3 fixes several issues. These security issues were fixed : - CVE-2017-16876: Cross-site scripting XSS vulnerability in the keyify function in mistune.py allowed remote attackers to inject arbitrary web script or HTML by leveraging failure to escape th...
Fedora 27 : python-mistune (2017-2eefd424bd)
Update to 0.8.3, fixing CVE-2017-15612 and CVE-2017-16876 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
MGASA-2018-0066 Updated python-mistune packages fix security vulnerabilities
mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline such as in java\nscript: or a crafted email address, related to the escape and autolink functions CVE-2017-15612. A cross-site-scripting vulnerability was found in python-mistune CVE-2017-16876...
Updated python-mistune packages fix security vulnerabilities
mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline such as in java\nscript: or a crafted email address, related to the escape and autolink functions CVE-2017-15612. A cross-site-scripting vulnerability was found in python-mistune CVE-2017-16876...
Mistune '_keyify' function cross-site scripting vulnerability
Mistune is a Python based parser with renderer functionality. A cross-site scripting vulnerability exists in the 'keyify' function of the mistune.py file in versions of Mistune prior to 0.8.1. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...
Fedora Update for python-mistune FEDORA-2017-2eefd424bd
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
