CVE-2026-115353

The Mistune markdown processor (versions before 3.3.0 ) is vulnerable to a path traversal vulnerability in the RST include directive . An attacker can exploit this by submitting markdown containing include directives with relative paths (e.g., ../ sequences) or absolute paths . This allows the at...