Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5484
HistoryNov 24, 2017 - 2:04 a.m.

Cross-site Scripting (XSS)

2017-11-2402:04:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3

0.001 Low

EPSS

Percentile

49.2%

mistune is vulnerable to cross-site scripting (XSS) attacks. The _keyify method doesn’t escape the key values which allows attackers to insert and execute arbitrary webscript.

CPENameOperatorVersion
mistunele0.8.0