CVE-2026-59929

creationtimestamp| type| source ---|---|--- 2026-07-08 20:05:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5w64e2ij2q 2026-07-20 22:35:21+00:00| published-proof-of-concept| https://github.com/lepture/mistune/security/advisories/GHSA-qfrw-5rxm-mhh2...

UBUNTU-CVE-2026-59929

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the safeurl filter in src/mistune/renderers/html.py blocks only javascript:, vbscript:, file:, and data: schemes, allowing legacy or chained schemes such as feed:, view-source:, jar:, livescript:, mocha:, ms-its:, mk:...