mistune has 19 CVEs on record. Disclosures have slowed: 3 in the last 90 days after 16 in the 90 before. The busiest recent month was July 2026 with 10. The median CVSS is 6.1 (medium). None have a confirmed exploitation report.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.1
- Publish → KEV
- —
- Last 90 days
- 3 prev 16
Weakness classes
Products
- mistune 19
Worst active — by depth score
CVE-2026-115355High· 7.5Mistune: Path Traversal and XSS in Include directive41GHSA-8cqv-vvq2-6p8cHigh· 7.5Duplicate Advisory: Mistune: Path Traversal and XSS in Include directive41CVE-2026-76098High· 7.5Mistune is a Python Markdown parser with renderers and plugins41CVE-2026-49851High· 7.5 Mistune: Potential DoS via quadratic-time parsing in parse_link_text41CVE-2026-59928High· 7.5Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a Markdown document containing many repeated or distinct …41
mistune vulnerabilities
CVEs affecting mistune, newest first. Open any entry for full detail, references, and exploit status.
19 CVEsRSS
CVE-2026-115355High· 7.5Mistune: Path Traversal and XSS in Include directive
Mistune: Path Traversal and XSS in Include directive
GHSA-8cqv-vvq2-6p8cHigh· 7.5Duplicate Advisory: Mistune: Path Traversal and XSS in Include directive
Duplicate Advisory: Mistune: Path Traversal and XSS in Include directive
CVE-2026-76098High· 7.5Mistune is a Python Markdown parser with renderers and plugins
Mistune is a Python Markdown parser with renderers and plugins. Versions 3.3.0 through 3.3.2 are vulnerable to DoS through deeply nested tokens. HTML rendering creates deeply nested emphasis tokens from consecutive asterisk characters, a…
CVE-2026-49851High· 7.5Mistune: Potential DoS via quadratic-time parsing in parse_link_text
Mistune: Potential DoS via quadratic-time parsing in parse_link_text
CVE-2026-59930Medium· 4.3Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the toc plugin and TableOfContents directive generate hea…
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the toc plugin and TableOfContents directive generate heading IDs as predictable toc_N values without slugifying the heading text, allowing attacker-controll…
CVE-2026-59929Medium· 6.1Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the safe_url filter in src/mistune/renderers/html.py bloc…
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the safe_url filter in src/mistune/renderers/html.py blocks only javascript:, vbscript:, file:, and data: schemes, allowing legacy or chained schemes such as…
CVE-2026-59928High· 7.5Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a Markdown document containing many repeated or distinct …
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a Markdown document containing many repeated or distinct reference-link definitions causes quadratic work in src/mistune/block_parser.py and the ref_links en…
CVE-2026-59927Medium· 5.3Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the Include directive in src/mistune/directives/include.p…
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the Include directive in src/mistune/directives/include.py detects only direct self-includes and not indirect cycles, allowing two markdown files that includ…
CVE-2026-59926Medium· 6.1Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, render_admonition() in src/mistune/directives/admonition.…
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, render_admonition() in src/mistune/directives/admonition.py concatenates the Admonition directive :class: option into the HTML class attribute without escapi…
CVE-2026-59925High· 7.5Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, long sequences of well-formed double-asterisk or triple-a…
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, long sequences of well-formed double-asterisk or triple-asterisk emphasis pairs around a character cause quadratic work in src/mistune/inline_parser.py becau…
CVE-2026-59924Medium· 5.9Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, Include.parse() joins and normalizes user-supplied includ…
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, Include.parse() joins and normalizes user-supplied include paths without verifying that the result remains within the intended markdown directory, allowing c…
CVE-2026-59923Medium· 6.1Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, HTMLRenderer.safe_url() does not block percent-encoded ja…
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, HTMLRenderer.safe_url() does not block percent-encoded javascript URIs, allowing attacker-supplied Markdown links or images to bypass URL protections and exe…
CVE-2026-59922High· 7.5Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a run of closed tilde, equals-sign, or caret marker pairs…
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a run of closed tilde, equals-sign, or caret marker pairs around a character causes quadratic work in src/mistune/plugins/formatting.py when the strikethroug…
CVE-2026-44899Medium· 4.7Mistune Image Directive CSS Injection Vulnerability
Mistune Image Directive CSS Injection Vulnerability
CVE-2026-44898Medium· 6.1Mistune TOC Anchor Injection XSS
Mistune TOC Anchor Injection XSS
CVE-2026-44897Medium· 6.1Mistune Heading ID Attribute has Injection XSS
Mistune Heading ID Attribute has Injection XSS
CVE-2026-44896Medium· 6.1Mistune has XSS via unescaped figclass/figwidth in Figure directive
Mistune has XSS via unescaped figclass/figwidth in Figure directive
CVE-2026-44708Medium· 6.1Mistune Math Plugin has an XSS Escape Bypass
Mistune Math Plugin has an XSS Escape Bypass
CVE-2026-33079High· 7.5In versions 3.0.0a1 through 3.2.0 of Mistune, there is a ReDoS (Regular Expression Denial of Service) vulnerability in `LINK_TITLE_RE` that allows an attacker who can supply Markdown for parsing to cause denial of service
In versions 3.0.0a1 through 3.2.0 of Mistune, there is a ReDoS (Regular Expression Denial of Service) vulnerability in `LINK_TITLE_RE` that allows an attacker who can supply Markdown for parsing to cause denial of service. The regular ex…