# mistune (PyPI) vulnerabilities 21 known vulnerabilities (7 high, 11 medium), with the versions each affects and the releases that fix them. ## At a glance - Latest release: 3.4.0 (Oct 19, 2026): no advisory affects it - Newest unaffected release: 3.4.0 (Oct 19, 2026), the latest release - Weekly downloads: 17.1M - Dependents: 6,818 - Releases: 57 since 0.1.0 (Feb 26, 2014) - Registry: https://pypi.org/project/mistune/ - Releases read: Nov 8, 2026 ## Version timeline Affected versions per advisory, in version order: - CVE-2026-115355: 0.1.0 to 3.2.1 (3.3.0 is outside it) - CVE-2026-76098: 3.3.0 to 3.3.2 (3.3.3 is outside it) - CVE-2026-59927: 0.1.0 to 3.2.1 (3.3.0 is outside it) - CVE-2026-59928: 0.1.0 to 3.2.1 (3.3.0 is outside it) - CVE-2026-59924: 0.1.0 to 3.2.1 (3.3.0 is outside it) - CVE-2026-59929: 0.1.0 to 3.2.1 (3.3.0 is outside it) - CVE-2026-59925: 0.1.0 to 3.2.1 (3.3.0 is outside it) - CVE-2026-59926: 0.1.0 to 3.2.1 (3.3.0 is outside it) - CVE-2026-59923: 0.1.0 to 3.2.1 (3.3.0 is outside it) - CVE-2026-59930: 0.1.0 to 3.2.1 (3.3.0 is outside it) - CVE-2026-59922: 0.1.0 to 3.2.1 (3.3.0 is outside it) - CVE-2026-49851: 0.1.0 to 3.2.1 (3.3.0 is outside it) - CVE-2026-44898: 0.1.0 to 3.2.0 (3.2.1 is outside it) - CVE-2026-44897: 0.1.0 to 3.2.0 (3.2.1 is outside it) - CVE-2026-44708: 0.1.0 to 3.2.0 (3.2.1 is outside it) - CVE-2026-44899: 0.1.0 to 3.2.0 (3.2.1 is outside it) - CVE-2026-44896: 0.1.0 to 3.2.0 (3.2.1 is outside it) - CVE-2026-33079: 3.0.0a1 to 3.2.0 (3.2.1 is outside it) - CVE-2022-34749: 2.0.0a1 to 2.0.2 (2.0.3 is outside it) - CVE-2017-16876: 0.1.0 to 0.8.0 (0.8.1 is outside it) - CVE-2017-15612: 0.1.0 to 0.7.4 (0.8.0 is outside it) ## Advisories (21) ### [CVE-2026-115355](https://cve.now/CVE-2026-115355): Mistune before 3.3.0 Path Traversal and XSS via Include Directive - Severity: High 8.7 - Published: Oct 22, 2026 - Affected: fixed in 3.3.0. - Fixed in 3.3.0 (released Jun 21, 2026, 123 days before disclosure). - The latest release, 3.4.0, is not affected. ### [CVE-2026-76098](https://cve.now/CVE-2026-76098): Mistune has Denial of Service — RecursionError via Excessive Emphasis Markers in Markdown - Severity: High 7.5 - Published: Aug 24, 2026 - Affected: from 3.3.0, fixed in 3.3.3. - Fixed in 3.3.3 (released Jul 9, 2026, 46 days before disclosure). - The latest release, 3.4.0, is not affected. ### [CVE-2026-59927](https://cve.now/CVE-2026-59927): Mistune directives/include: mutual \`.. include::\` recursion crashes the renderer with \`RecursionError\`, denial of service via two… - Severity: Medium 5.3 - Published: Jul 8, 2026 - Affected: fixed in 3.3.0. - Fixed in 3.3.0 (released Jun 21, 2026, 17 days before disclosure). - The latest release, 3.4.0, is not affected. ### [CVE-2026-59928](https://cve.now/CVE-2026-59928): Mistune block\_parser: quadratic-time parsing on long lists of repeated reference-link definitions - Severity: High 7.5 - Published: Jul 8, 2026 - Affected: fixed in 3.3.0. - Fixed in 3.3.0 (released Jun 21, 2026, 17 days before disclosure). - The latest release, 3.4.0, is not affected. ### [CVE-2026-59924](https://cve.now/CVE-2026-59924): Mistune: Arbitrary File Read via Include directive path traversal - Severity: Medium 5.9 - Published: Jul 8, 2026 - Affected: fixed in 3.3.0. - Fixed in 3.3.0 (released Jun 21, 2026, 17 days before disclosure). - The latest release, 3.4.0, is not affected. ### [CVE-2026-59929](https://cve.now/CVE-2026-59929): Mistune renderers/html.safe\_url: HARMFUL\_PROTOCOLS list misses legacy and chained schemes that historically chain to \`javascript:\` execution - Severity: Medium 6.1 - Published: Jul 8, 2026 - Affected: fixed in 3.3.0. - Fixed in 3.3.0 (released Jun 21, 2026, 17 days before disclosure). - The latest release, 3.4.0, is not affected. ### [CVE-2026-59925](https://cve.now/CVE-2026-59925): inline\_parser: quadratic-time parsing on long runs of \`x\` and \`\*x\*\` emphasis pairs - Severity: High 7.5 - Published: Jul 8, 2026 - Affected: fixed in 3.3.0. - Fixed in 3.3.0 (released Jun 21, 2026, 17 days before disclosure). - The latest release, 3.4.0, is not affected. ### [CVE-2026-59926](https://cve.now/CVE-2026-59926): Mistune: XSS via unescaped class option in Admonition directive - Severity: Medium 5.3 - Published: Jul 8, 2026 - Affected: fixed in 3.3.0. - Fixed in 3.3.0 (released Jun 21, 2026, 17 days before disclosure). - The latest release, 3.4.0, is not affected. ### [CVE-2026-59923](https://cve.now/CVE-2026-59923): Mistune: XSS via percent-encoded javascript URI bypass in safe\_url() - Severity: Medium 6.1 - Published: Jul 8, 2026 - Affected: fixed in 3.3.0. - Fixed in 3.3.0 (released Jun 21, 2026, 17 days before disclosure). - The latest release, 3.4.0, is not affected. ### [CVE-2026-59930](https://cve.now/CVE-2026-59930): Mistune toc / TableOfContents directive: heading IDs use predictable \`toc\_N\` numbering with no slugification, allowing collision with… - Severity: Medium 4.3 - Published: Jul 8, 2026 - Affected: fixed in 3.3.0. - Fixed in 3.3.0 (released Jun 21, 2026, 17 days before disclosure). - The latest release, 3.4.0, is not affected. ### [CVE-2026-59922](https://cve.now/CVE-2026-59922): Mistune plugins/formatting: quadratic-time parsing on long runs of \`~~x~~\`, \`==x==\`, and \`^^x^^\` markers (strikethrough / mark / insert) - Severity: High 7.5 - Published: Jul 8, 2026 - Affected: fixed in 3.3.0. - Fixed in 3.3.0 (released Jun 21, 2026, 17 days before disclosure). - The latest release, 3.4.0, is not affected. ### [CVE-2026-49851](https://cve.now/CVE-2026-49851): Mistune: Potential DoS via quadratic-time parsing in parse\_link\_text - Severity: High 8.7 - Published: Jun 24, 2026 - Affected: fixed in 3.3.0. - Fixed in 3.3.0 (released Jun 21, 2026, 3 days before disclosure). - The latest release, 3.4.0, is not affected. ### [CVE-2026-44898](https://cve.now/CVE-2026-44898): Mistune TOC Anchor Injection XSS - Severity: Medium 6.1 - Published: May 26, 2026 - Affected: fixed in 3.2.1; from 3.2.0, fixed in 3.2.1. - Fixed in 3.2.1 (released May 3, 2026, 23 days before disclosure). - The latest release, 3.4.0, is not affected. ### [CVE-2026-44897](https://cve.now/CVE-2026-44897): Mistune Heading ID Attribute Injection XSS - Severity: Medium 6.1 - Published: May 26, 2026 - Affected: fixed in 3.2.1. - Fixed in 3.2.1 (released May 3, 2026, 23 days before disclosure). - The latest release, 3.4.0, is not affected. ### [CVE-2026-44708](https://cve.now/CVE-2026-44708): Mistune Math Plugin XSS Escape Bypass - Severity: Medium 6.1 - Published: May 26, 2026 - Affected: through 3.2.0; fixed in 3.2.1. - Fixed in 3.2.1 (released May 3, 2026, 23 days before disclosure). - The latest release, 3.4.0, is not affected. ### [CVE-2026-44899](https://cve.now/CVE-2026-44899): Mistune Image Directive CSS Injection Vulnerability - Severity: Medium 4.7 - Published: May 26, 2026 - Affected: from 3.2.0, fixed in 3.2.1; fixed in 3.2.1. - Fixed in 3.2.1 (released May 3, 2026, 23 days before disclosure). - The latest release, 3.4.0, is not affected. ### [CVE-2026-44896](https://cve.now/CVE-2026-44896): Mistune: XSS via unescaped figclass/figwidth in Figure directive - Severity: Medium 5.3 - Published: May 26, 2026 - Affected: fixed in 3.2.1; fixed in 3.2.1. - Fixed in 3.2.1 (released May 3, 2026, 23 days before disclosure). - The latest release, 3.4.0, is not affected. ### [CVE-2026-33079](https://cve.now/CVE-2026-33079): Mistune ReDoS in LINK\_TITLE\_RE allows denial of service with crafted Markdown titles - Severity: High 8.7 - Published: May 6, 2026 - Affected: from 3.0.0a1, fixed in 3.2.1. - Fixed in 3.2.1 (released May 3, 2026, 3 days before disclosure). - The latest release, 3.4.0, is not affected. ### [CVE-2022-34749](https://cve.now/CVE-2022-34749): In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of… - Severity: Unrated - Published: Jul 25, 2022 - Affected: from 2.0.0a1, fixed in 2.0.3. - Fixed in 2.0.3 (released Jun 27, 2022, 28 days before disclosure). - The latest release, 3.4.0, is not affected. ### [CVE-2017-16876](https://cve.now/CVE-2017-16876): Cross-site scripting (XSS) vulnerability in the \_keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject… - Severity: Unrated - Published: Dec 29, 2017 - Affected: fixed in 0.8.1. - Fixed in 0.8.1 (released Nov 7, 2017, 52 days before disclosure). - The latest release, 3.4.0, is not affected. ### [CVE-2017-15612](https://cve.now/CVE-2017-15612): mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline (such as in java\\nscript:) or a crafted email address, related to the… - Severity: Unrated - Published: Oct 19, 2017 - Affected: fixed in 0.8. - Fixed in 0.8.0 (released Oct 26, 2017, 7 days after disclosure). - The latest release, 3.4.0, is not affected. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/pypi/mistune Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.