Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
•added 2019/01/04 5:47 p.m.•26 views

mistune Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in the keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument...

6.1CVSS5.8AI score0.02235EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2019/01/04 5:47 p.m.•28 views

GHSA-98GJ-WWXM-CJ3H mistune Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in the keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument...

6.1CVSS5.9AI score0.02235EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/12/29 12:00 a.m.•4 views

CVE-2017-16876: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument...

6.1CVSS6.5AI score0.02235EPSS
SaveExploits0References2
Rows per page
Query Builder