Important: python-mistune

Issue Overview: Mistune is a Python Markdown parser with renderers and plugins. Versions 3.3.0 through 3.3.2 are vulnerable to DoS through deeply nested tokens. HTML rendering creates deeply nested emphasis tokens from consecutive asterisk characters, and recursive rendering in...

CVE-2026-76098 affecting package python-mistune for versions less than 3.3.4-1

CVE-2026-76098 affecting package python-mistune for versions less than 3.3.4-1. An upgraded version of the package is available that resolves this issue...

SUSE SLES16 Security Update : python-mistune (SUSE-SU-2026:22655-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22655-1 advisory. This update for python-mistune fixes the following issues - CVE-2026-59922: quadratic-time parsing on long runs of some markers in...

openSUSE 16 Security Update : python-mistune (openSUSE-SU-2026:21339-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21339-1 advisory. This update for python-mistune fixes the following issues - CVE-2026-59922: quadratic-time parsing on long runs of some markers in formatting.py...

Updated python-mistune package fixes security vulnerabilities

The updated python-mistune package fixes two security vulnerablities: Prior to 3.2.1, rendertocul builds a table-of-contents tree from a list of level, id, text tuples. Both the id value used as href="" and the text value used as the visible link label are inserted into tags via a plain Python...

Security update for python-mistune (moderate)

openSUSE security update: security update for python-mistune ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21339-1 Rating: moderate References: bsc1271082 bsc1271117 bsc1271119 bsc1271121 bsc1271125 bsc1271127 bsc1271128 bsc1271131 bsc1271132...

SUSE SLED15 / SLES15 Security Update : python-mistune (SUSE-SU-2026:2949-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:2949-1 advisory. This update for python-mistune fixes the following issue - CVE-2026-44898: improper sanitization of user-supplied HTML...

Security update for python-mistune

This update for python-mistune fixes the following issue CVE-2026-44898: improper sanitization of user-supplied HTML input in rendertocul can lead to XSS bsc1265052. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

SUSE-SU-2026:2949-1 Security update for python-mistune

This update for python-mistune fixes the following issue - CVE-2026-44898: improper sanitization of user-supplied HTML input in rendertocul can lead to XSS bsc1265052...

PYSEC-2026-2651 Mistune has a ReDoS in LINK_TITLE_RE that allows denial of service via crafted Markdown input

Summary A ReDoS Regular Expression Denial of Service vulnerability in LINKTITLERE allows an attacker who can supply Markdown for parsing to cause denial of service. A crafted 58-byte Markdown document blocks the parser for approximately 6 seconds measured on Apple M2, Python 3.14.3, with...

AZL-92217 CVE-2026-59925 affecting package python-mistune for versions less than 3.3.0-1

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, long sequences of well-formed double-asterisk or triple-asterisk emphasis pairs around a character cause quadratic work in src/mistune/inlineparser.py because the parser scans forward for matching close markers from...

openSUSE 16 Security Update : python-mistune (openSUSE-SU-2026:21191-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21191-1 advisory. This update for python-mistune fixes the following issue - CVE-2026-49851: potential DoS via quadratic-time parsing in parselinktext bsc1269091. Tenable...

python311-mistune-3.3.2-1.1 on GA media (moderate)

python311-mistune-3.3.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:11180-1 Rating: moderate Cross-References: CVE-2026-49851 CVSS scores: CVE-2026-49851 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability ca...

OPENSUSE-SU-2026:11180-1 python311-mistune-3.3.2-1.1 on GA media

These are all security issues fixed in the python311-mistune-3.3.2-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-59926 affecting package python-mistune for versions less than 3.3.0-1

CVE-2026-59926 affecting package python-mistune for versions less than 3.3.0-1. A patched version of the package is available...

CVE-2026-59930 affecting package python-mistune for versions less than 3.3.0-1

CVE-2026-59930 affecting package python-mistune for versions less than 3.3.0-1. A patched version of the package is available...

CVE-2026-59922 affecting package python-mistune for versions less than 3.3.0-1

CVE-2026-59922 affecting package python-mistune for versions less than 3.3.0-1. A patched version of the package is available...

CVE-2026-59928 affecting package python-mistune for versions less than 3.3.0-1

CVE-2026-59928 affecting package python-mistune for versions less than 3.3.0-1. A patched version of the package is available...

CVE-2026-59925 affecting package python-mistune for versions less than 3.3.0-1

CVE-2026-59925 affecting package python-mistune for versions less than 3.3.0-1. A patched version of the package is available...

CVE-2026-49851 affecting package python-mistune for versions less than 3.3.0-1

CVE-2026-49851 affecting package python-mistune for versions less than 3.3.0-1. An upgraded version of the package is available that resolves this issue...