Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

mistune

21 known vulnerabilities (7 high, 11 medium), with the versions each affects and the releases that fix them.

Latest release
3.4.0 (Oct 19, 2026): no advisory affects it
Newest unaffected release
3.4.0 (Oct 19, 2026), the latest release
Advisories
21 · 7 high, 11 medium
Weekly downloads
17.1M
Dependents
6,818
Releases
57 since 0.1.0 (Feb 26, 2014)
Registry
PyPI
Releases read
Nov 8, 2026

Version timeline

Show all 21 advisoriesShow fewer advisories
Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 21

  • Mistune before 3.3.0 Path Traversal and XSS via Include Directive

    Affected: fixed in 3.3.0.

    Fixed in 3.3.0 (released Jun 21, 2026, 123 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • Mistune has Denial of Service — RecursionError via Excessive Emphasis Markers in Markdown

    Affected: from 3.3.0, fixed in 3.3.3.

    Fixed in 3.3.3 (released Jul 9, 2026, 46 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-59927Medium 5.3

    Mistune directives/include: mutual `.. include::` recursion crashes the renderer with `RecursionError`, denial of service via two…

    Affected: fixed in 3.3.0.

    Fixed in 3.3.0 (released Jun 21, 2026, 17 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • Mistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitions

    Affected: fixed in 3.3.0.

    Fixed in 3.3.0 (released Jun 21, 2026, 17 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-59924Medium 5.9

    Mistune: Arbitrary File Read via Include directive path traversal

    Affected: fixed in 3.3.0.

    Fixed in 3.3.0 (released Jun 21, 2026, 17 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-59929Medium 6.1

    Mistune renderers/html.safe_url: HARMFUL_PROTOCOLS list misses legacy and chained schemes that historically chain to `javascript:` execution

    Affected: fixed in 3.3.0.

    Fixed in 3.3.0 (released Jun 21, 2026, 17 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • inline_parser: quadratic-time parsing on long runs of `x` and `*x*` emphasis pairs

    Affected: fixed in 3.3.0.

    Fixed in 3.3.0 (released Jun 21, 2026, 17 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-59926Medium 5.3

    Mistune: XSS via unescaped class option in Admonition directive

    Affected: fixed in 3.3.0.

    Fixed in 3.3.0 (released Jun 21, 2026, 17 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-59923Medium 6.1

    Mistune: XSS via percent-encoded javascript URI bypass in safe_url()

    Affected: fixed in 3.3.0.

    Fixed in 3.3.0 (released Jun 21, 2026, 17 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-59930Medium 4.3

    Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with…

    Affected: fixed in 3.3.0.

    Fixed in 3.3.0 (released Jun 21, 2026, 17 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • Mistune plugins/formatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough / mark / insert)

    Affected: fixed in 3.3.0.

    Fixed in 3.3.0 (released Jun 21, 2026, 17 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • Mistune: Potential DoS via quadratic-time parsing in parse_link_text

    Affected: fixed in 3.3.0.

    Fixed in 3.3.0 (released Jun 21, 2026, 3 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-44898Medium 6.1

    Mistune TOC Anchor Injection XSS

    Affected: fixed in 3.2.1; from 3.2.0, fixed in 3.2.1.

    Fixed in 3.2.1 (released May 3, 2026, 23 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-44897Medium 6.1

    Mistune Heading ID Attribute Injection XSS

    Affected: fixed in 3.2.1.

    Fixed in 3.2.1 (released May 3, 2026, 23 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-44708Medium 6.1

    Mistune Math Plugin XSS Escape Bypass

    Affected: through 3.2.0; fixed in 3.2.1.

    Fixed in 3.2.1 (released May 3, 2026, 23 days before disclosure).

    The latest release, 3.4.0, is not affected.

Show all 21 advisoriesShow fewer advisories
  • CVE-2026-44899Medium 4.7

    Mistune Image Directive CSS Injection Vulnerability

    Affected: from 3.2.0, fixed in 3.2.1; fixed in 3.2.1.

    Fixed in 3.2.1 (released May 3, 2026, 23 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-44896Medium 5.3

    Mistune: XSS via unescaped figclass/figwidth in Figure directive

    Affected: fixed in 3.2.1; fixed in 3.2.1.

    Fixed in 3.2.1 (released May 3, 2026, 23 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • Mistune ReDoS in LINK_TITLE_RE allows denial of service with crafted Markdown titles

    Affected: from 3.0.0a1, fixed in 3.2.1.

    Fixed in 3.2.1 (released May 3, 2026, 3 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of…

    Affected: from 2.0.0a1, fixed in 2.0.3.

    Fixed in 2.0.3 (released Jun 27, 2022, 28 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • Cross-site scripting (XSS) vulnerability in the _keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject…

    Affected: fixed in 0.8.1.

    Fixed in 0.8.1 (released Nov 7, 2017, 52 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline (such as in java\nscript:) or a crafted email address, related to the…

    Affected: fixed in 0.8.

    Fixed in 0.8.0 (released Oct 26, 2017, 7 days after disclosure).

    The latest release, 3.4.0, is not affected.