PatchFirst · Vulnérabilités récentes
Vulnérabilités publiées pour mistune au cours des 30 derniers jours : 9. Présentes dans le catalogue KEV : 0.
Vulnérabilités : 23
In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking.
Cross-site scripting (XSS) vulnerability in the _keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument.
mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline (such as in java\nscript:) or a crafted email address, related to the escape and autolink functions.
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.