CVE-2026-120500: redimp otterwiki: An Otter Wiki before 2.26.2 contains a stored cross-site scripting vulnerability in OtterwikiMdRenderer.block_code that…

An Otter Wiki before 2.26.2 contains a stored cross-site scripting vulnerability in OtterwikiMdRenderer.blockcode that allows attackers who can edit pages, including anonymous users under the default configuration, to inject arbitrary script. Attackers can place HTML inside a math fenced code...

arvados-cwl-runner (>=2.6.0rc3, <=2.7.4), db-classifier (0.0.2) +18 more potentially affected by CVE-2026-49851 via mistune (2.0.5)

mistune PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - arvados-cwl-runner =2.6.0rc3, =2.0.5, =4.1.0, =0.8.4, =2.1.1, =1.0.0, =2.2.0, =0.0.1, =2.4.1rc3, =8.3.20221209165047, =8.5.20240102191335 - sitefa...

arvados-cwl-runner (>=2.6.0rc3, <=2.7.4), db-classifier (0.0.2) +18 more potentially affected by CVE-2026-59929 via mistune (2.0.5)

mistune PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - arvados-cwl-runner =2.6.0rc3, =2.0.5, =4.1.0, =0.8.4, =2.1.1, =1.0.0, =2.2.0, =0.0.1, =2.4.1rc3, =8.3.20221209165047, =8.5.20240102191335 - sitefa...

fittrackee (>=1.2.0, <=1.3.0b3), mein-et-projekt (0.1.0) +2 more potentially affected by CVE-2026-44898 via mistune (3.2.0)

mistune PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - fittrackee =1.2.0, =2.19.0, =2.20.4 - uniovi-simur-wearablepermed-pipeline-step-counting 1.2.3 Source cves: CVE-2026-44898 Source advisory:...

fittrackee (>=1.2.0, <=1.3.0b3), mein-et-projekt (0.1.0) +2 more potentially affected by CVE-2026-44899 via mistune (3.2.0)

mistune PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - fittrackee =1.2.0, =2.19.0, =2.20.4 - uniovi-simur-wearablepermed-pipeline-step-counting 1.2.3 Source cves: CVE-2026-44899 Source advisory:...

fittrackee (>=1.2.0, <=1.3.0b3), mein-et-projekt (0.1.0) +2 more potentially affected by CVE-2026-44899 via mistune (3.2.0)

mistune PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - fittrackee =1.2.0, =2.19.0, =2.20.4 - uniovi-simur-wearablepermed-pipeline-step-counting 1.2.3 Source cves: CVE-2026-44899 Source advisory:...

fittrackee (>=1.2.0, <=1.3.0b3), mein-et-projekt (0.1.0) +2 more potentially affected by CVE-2026-44898 via mistune (3.2.0)

mistune PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - fittrackee =1.2.0, =2.19.0, =2.20.4 - uniovi-simur-wearablepermed-pipeline-step-counting 1.2.3 Source cves: CVE-2026-44898 Source advisory:...