CVE-2026-115350

A flaw was found in mistune. An attacker can exploit this vulnerability to conduct stored Cross-Site Scripting XSS attacks through the file inclusion directive. By referencing a crafted HTML file, unescaped content is processed as raw markup, enabling the execution of arbitrary script code in the...