Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2019/01/04 5:47 p.m.24 views

mistune Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in the keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument...

6.1CVSS5.8AI score0.02235EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2019/01/04 5:47 p.m.22 views

GHSA-98GJ-WWXM-CJ3H mistune Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in the keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument...

6.1CVSS5.9AI score0.02235EPSS
SaveExploits0References7
Rows per page
Query Builder