Cross-site Scripting (XSS)

mistune is vulnerable to cross-site scripting XSS attacks. The keyify method doesn't escape the key values which allows attackers to insert and execute arbitrary webscript...

Cross-site Scripting (XSS)

mistune is vulnerable to cross-site scripting XSS attacks. These attacks can be conducted by inserting an unexpected newline or by using an email address to execute arbitrary Javascript...

PYSEC-2017-80

mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline such as in java\nscript: or a crafted email address, related to the escape and autolink functions...