ai-shell (>=0.1.0, <=1.0.4), almax-common (>=0.9.5, <=1.0.2) +137 more potentially affected by CVE-2026-44897 via mistune (>=3.0.0rc5, <=3.2.0)

mistune PYPI version =3.0.0rc5, =0.1.0, =0.9.5, =3.0.0rc3, =3.2.1b1, =1.0.1, =1.0.1, =0.1.0, =0.0.1, =0.1.0, =0.0.2, =1.0.0.1, =0.0.1, =0.1.10, =0.26.0, =0.27.0 and more Source cves: CVE-2026-44897 Source advisory: OSV:GHSA-V87V-83H2-53W7...

GHSA-V87V-83H2-53W7 Mistune Heading ID Attribute has Injection XSS

Summary HTMLRenderer.heading builds the opening tag by string-concatenating the id attribute value directly into the HTML — with no call to escape, safeentity, or any other sanitisation function. A double-quote character " in the id value terminates the attribute, allowing an attacker to inject...

engrave (>=2.0.0, <=2.0.4), inka (>=2.1.0, <=2.2.0) +1 more potentially affected by CVE-2026-44897 via mistune (2.0.2)

mistune PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - engrave =2.0.0, =2.1.0, =0.0.0.dev0, =1.13.0a1.dev3 Source cves: CVE-2026-44897 Source advisory: OSV:GHSA-V87V-83H2-53W7...

nlm-ingestor (>=0.1.1, <=0.1.5), nvidia-modulus-sym (>=1.0.0, <=1.7.0) +1 more potentially affected by CVE-2026-44897 via mistune (2.0.3)

mistune PYPI version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - nlm-ingestor =0.1.1, =1.0.0, =1.7.0 - stattic 1.0.0 Source cves: CVE-2026-44897 Source advisory: OSV:GHSA-V87V-83H2-53W7...

guide-md (>=0.0.6, <=0.1.20), zh-doclint (>=0.1.0, <=0.1.2) +1 more potentially affected by CVE-2026-44897 via mistune (0.7.3)

mistune PYPI version 0.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - guide-md =0.0.6, =0.1.0, =0.1.2, =0.3.2 Source cves: CVE-2026-44897 Source advisory: OSV:GHSA-V87V-83H2-53W7...

mvrk (>=1.2.0, <=1.2.1), repo-cli (>=0.0.1.8, <=0.0.1.14) potentially affected by CVE-2026-44897 via mistune (2.0.0a4)

mistune PYPI version 2.0.0a4 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - mvrk =1.2.0, =0.0.1.8, =0.0.1.14 Source cves: CVE-2026-44897 Source advisory: OSV:GHSA-V87V-83H2-53W7...

biobb-io (>=0.0.1, <=0.0.8), biobb-model (>=0.0.1, <=0.0.10) +3 more potentially affected by CVE-2026-44897 via mistune (0.7.4)

mistune PYPI version 0.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - biobb-io =0.0.1, =0.0.1, =0.2.1, =2.2.20170208112505, =2.7.20181012180226 Source cves: CVE-2026-44897 Source advisory: OSV:GHSA-V87V-83H2-53W7...

pyne-xmas-elves (>=0.4.0, <=0.7.1), tagy (>=0.2.0, <=0.3.0) potentially affected by CVE-2026-44896 via mistune (0.8.1)

mistune PYPI version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - pyne-xmas-elves =0.4.0, =0.2.0, =0.3.0 Source cves: CVE-2026-44896 Source advisory: OSV:GHSA-58CW-G322-P94V...

kart (>=0.8.0, <=0.8.1) potentially affected by CVE-2026-44896 via mistune (2.0.0a6)

mistune PYPI version 2.0.0a6 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - kart =0.8.0, =0.8.1 Source cves: CVE-2026-44896 Source advisory: OSV:GHSA-58CW-G322-P94V...

Mistune has XSS via unescaped figclass/figwidth in Figure directive

In src/mistune/directives/image.py, the renderfigure function concatenates figclass and figwidth options directly into HTML attributes without escaping lines 152-168. This allows attribute injection and XSS even when HTMLRendererescape=True is used, because these values bypass the inline renderer...

GHSA-58CW-G322-P94V Mistune has XSS via unescaped figclass/figwidth in Figure directive

In src/mistune/directives/image.py, the renderfigure function concatenates figclass and figwidth options directly into HTML attributes without escaping lines 152-168. This allows attribute injection and XSS even when HTMLRendererescape=True is used, because these values bypass the inline renderer...

animalia (>=0.0.27, <=0.0.28), appyratus (>=3.0.3, <=3.0.4) +32 more potentially affected by CVE-2026-44896 via mistune (2.0.0rc1)

mistune PYPI version 2.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - animalia =0.0.27, =3.0.3, =0.1.0, =0.11.0, =0.20.7, =0.0.5, =0.0.13, =1.0.18, =0.0.1, =0.1.3 - datapackage-pipelines-spss 0.0.2a0 - embryo 3.0....

guide-md (>=0.0.6, <=0.1.20), zh-doclint (>=0.1.0, <=0.1.2) +1 more potentially affected by CVE-2026-44896 via mistune (0.7.3)

mistune PYPI version 0.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - guide-md =0.0.6, =0.1.0, =0.1.2, =0.3.2 Source cves: CVE-2026-44896 Source advisory: OSV:GHSA-58CW-G322-P94V...

mvrk (>=1.2.0, <=1.2.1), repo-cli (>=0.0.1.8, <=0.0.1.14) potentially affected by CVE-2026-44896 via mistune (2.0.0a4)

mistune PYPI version 2.0.0a4 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - mvrk =1.2.0, =0.0.1.8, =0.0.1.14 Source cves: CVE-2026-44896 Source advisory: OSV:GHSA-58CW-G322-P94V...

abracadabra (>=0.0.0, <=0.0.7), acclimatise (>=0.0.18, <=1.2.0) +420 more potentially affected by CVE-2026-44896 via mistune (0.8.4)

mistune PYPI version 0.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - abracadabra =0.0.0, =0.0.18, =2.0.0.post1, =0.3.0, =1.0.0, =1.3.4, =1.0.47, =1.0.66, =0.1.0, =0.1.0, =0.1.16, =0.18.3, =1.0.0, =2.2.0 and more...

ai-shell (>=0.1.0, <=1.0.4), almax-common (>=0.9.5, <=1.0.2) +137 more potentially affected by CVE-2026-44896 via mistune (>=3.0.0rc5, <=3.2.0)

mistune PYPI version =3.0.0rc5, =0.1.0, =0.9.5, =3.0.0rc3, =3.2.1b1, =1.0.1, =1.0.1, =0.1.0, =0.0.1, =0.1.0, =0.0.2, =1.0.0.1, =0.0.1, =0.1.10, =0.26.0, =0.27.0 and more Source cves: CVE-2026-44896 Source advisory: GHSA-58CW-G322-P94V...

ai-shell (>=0.1.0, <=1.0.4), almax-common (>=0.9.5, <=1.0.2) +137 more potentially affected by CVE-2026-44896 via mistune (>=3.0.0rc5, <=3.2.0)

mistune PYPI version =3.0.0rc5, =0.1.0, =0.9.5, =3.0.0rc3, =3.2.1b1, =1.0.1, =1.0.1, =0.1.0, =0.0.1, =0.1.0, =0.0.2, =1.0.0.1, =0.0.1, =0.1.10, =0.26.0, =0.27.0 and more Source cves: CVE-2026-44896 Source advisory: OSV:GHSA-58CW-G322-P94V...

ai-shell (>=0.1.0, <=1.0.4), almax-common (>=0.9.5, <=1.0.2) +137 more potentially affected by CVE-2026-44896 via mistune (>=3.0.0rc5, <=3.2.0)

mistune PYPI version =3.0.0rc5, =0.1.0, =0.9.5, =3.0.0rc3, =3.2.1b1, =1.0.1, =1.0.1, =0.1.0, =0.0.1, =0.1.0, =0.0.2, =1.0.0.1, =0.0.1, =0.1.10, =0.26.0, =0.27.0 and more Source cves: CVE-2026-44896 Source advisory: SNYK:PYTHON-MISTUNE-16624505...

engrave (>=2.0.0, <=2.0.4), inka (>=2.1.0, <=2.2.0) +1 more potentially affected by CVE-2026-44896 via mistune (2.0.2)

mistune PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - engrave =2.0.0, =2.1.0, =0.0.0.dev0, =1.13.0a1.dev3 Source cves: CVE-2026-44896 Source advisory: OSV:GHSA-58CW-G322-P94V...

cfnow (>=0.0.1, <=0.0.6), coreplus (0.1.0) +20 more potentially affected by CVE-2026-44896 via mistune (2.0.4)

mistune PYPI version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - cfnow =0.0.1, =0.1.1rc3, =0.1.0, =1.4.0, =4.0.2, =2.2.1, =0.1.0, =0.1.0, =0.0.3, =1.0.4, =1.0.7 and more Source cves: CVE-2026-44896 Source...