SUSE SLED15 / SLES15 Security Update : python-mistune (SUSE-SU-2026:2949-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:2949-1 advisory. This update for python-mistune fixes the following issue - CVE-2026-44898: improper sanitization of user-supplied HTML...

Security update for python-mistune

This update for python-mistune fixes the following issue CVE-2026-44898: improper sanitization of user-supplied HTML input in rendertocul can lead to XSS bsc1265052. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the rendertocul function. An attacker can execute arbitrary JavaScript in the context of the rendered page by injecting malicious input into heading text, which is then used unescaped as an anchor ID and labe...