mistune project kayıtları
mistune project üreticisine ait 17 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')10
- CWE-407 Inefficient Algorithmic Complexity3
- CWE-1333 Inefficient Regular Expression Complexity1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-345 Insufficient Verification of Data Authenticity1
- CWE-674 Uncontrolled Recursion1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
17 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | EPSS · Yayın |
|---|---|---|---|---|
30İzleyin | CVE-2022-34749İstismar yok | In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtrackinmistune project · mistune · CWE-1333 | Yüksek7,5 | %1,625 Tem 2022 |
30İzleyin | CVE-2026-59928İstismar yok | Mistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitionsmistune project · mistune · CWE-407 | Yüksek7,5 | %0,68 Tem 2026 |
30İzleyin | CVE-2026-59922İstismar yok | Mistune plugins/formatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough / mark / insert)mistune project · mistune · CWE-407 | Yüksek7,5 | %0,68 Tem 2026 |
30İzleyin | CVE-2026-59925İstismar yok | inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairsmistune project · mistune · CWE-407 | Yüksek7,5 | %0,68 Tem 2026 |
25İzleyin | CVE-2017-16876İstismar yok | Cross-site scripting (XSS) vulnerability in the _keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbmistune project · mistune · CWE-79 | Orta6,1 | %2,229 Ara 2017 |
24İzleyin | CVE-2017-15612İstismar yok | mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline (such as in java\nscript:) or a crafted email address, related to the escapmistune project · mistune · CWE-79 | Orta6,1 | %0,919 Eki 2017 |
24İzleyin | CVE-2026-59923İstismar yok | Mistune: XSS via percent-encoded javascript URI bypass in safe_url()mistune project · mistune · CWE-79 | Orta6,1 | %0,38 Tem 2026 |
24İzleyin | CVE-2026-59929İstismar yok | Mistune renderers/html.safe_url: HARMFUL_PROTOCOLS list misses legacy and chained schemes that historically chain to `javascript:` executionmistune project · mistune · CWE-79 | Orta6,1 | %0,38 Tem 2026 |
24İzleyin | CVE-2026-44897İstismar yok | Mistune Heading ID Attribute Injection XSSmistune project · mistune · CWE-79 | Orta6,1 | %0,226 May 2026 |
24İzleyin | CVE-2026-44898İstismar yok | Mistune TOC Anchor Injection XSSmistune project · mistune · CWE-79 | Orta6,1 | %0,226 May 2026 |
24İzleyin | CVE-2026-44708İstismar yok | Mistune Math Plugin XSS Escape Bypassmistune project · mistune · CWE-79 | Orta6,1 | %0,226 May 2026 |
24İzleyin | CVE-2026-44899İstismar yok | Mistune Image Directive CSS Injection Vulnerabilitymistune project · mistune · CWE-79 | Orta6,1 | %0,226 May 2026 |
23İzleyin | CVE-2026-59924İstismar yok | Mistune: Arbitrary File Read via Include directive path traversalmistune project · mistune · CWE-22 | Orta5,9 | %0,48 Tem 2026 |
21İzleyin | CVE-2026-59927İstismar yok | Mistune directives/include: mutual `.. include::` recursion crashes the renderer with `RecursionError`, denial of service via two attacker-controlled markdown fmistune project · mistune · CWE-674 | Orta5,3 | %0,58 Tem 2026 |
21İzleyin | CVE-2026-59926İstismar yok | Mistune: XSS via unescaped class option in Admonition directivemistune project · mistune · CWE-79 | Orta5,3 | %0,38 Tem 2026 |
21İzleyin | CVE-2026-44896İstismar yok | Mistune: XSS via unescaped figclass/figwidth in Figure directivemistune project · mistune · CWE-79 | Orta5,3 | %0,126 May 2026 |
17İzleyin | CVE-2026-59930İstismar yok | Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id="tmistune project · mistune · CWE-345 | Orta4,3 | %0,18 Tem 2026 |
- CVE-2022-3474930İzleyin
In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtrackin
YüksekCVSS 7,5İstismar yokEPSS %1mistune project · mistune25 Tem 2022
- CVE-2026-5992830İzleyin
Mistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitions
YüksekCVSS 7,5İstismar yokEPSS %0mistune project · mistune8 Tem 2026
- CVE-2026-5992230İzleyin
Mistune plugins/formatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough / mark / insert)
YüksekCVSS 7,5İstismar yokEPSS %0mistune project · mistune8 Tem 2026
- CVE-2026-5992530İzleyin
inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs
YüksekCVSS 7,5İstismar yokEPSS %0mistune project · mistune8 Tem 2026
- CVE-2017-1687625İzleyin
Cross-site scripting (XSS) vulnerability in the _keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arb
OrtaCVSS 6,1İstismar yokEPSS %2mistune project · mistune29 Ara 2017
- CVE-2017-1561224İzleyin
mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline (such as in java\nscript:) or a crafted email address, related to the escap
OrtaCVSS 6,1İstismar yokEPSS %0mistune project · mistune19 Eki 2017
- CVE-2026-5992324İzleyin
Mistune: XSS via percent-encoded javascript URI bypass in safe_url()
OrtaCVSS 6,1İstismar yokEPSS %0mistune project · mistune8 Tem 2026
- CVE-2026-5992924İzleyin
Mistune renderers/html.safe_url: HARMFUL_PROTOCOLS list misses legacy and chained schemes that historically chain to `javascript:` execution
OrtaCVSS 6,1İstismar yokEPSS %0mistune project · mistune8 Tem 2026
- CVE-2026-4489724İzleyin
Mistune Heading ID Attribute Injection XSS
OrtaCVSS 6,1İstismar yokEPSS %0mistune project · mistune26 May 2026
- CVE-2026-4489824İzleyin
Mistune TOC Anchor Injection XSS
OrtaCVSS 6,1İstismar yokEPSS %0mistune project · mistune26 May 2026
- CVE-2026-4470824İzleyin
Mistune Math Plugin XSS Escape Bypass
OrtaCVSS 6,1İstismar yokEPSS %0mistune project · mistune26 May 2026
- CVE-2026-4489924İzleyin
Mistune Image Directive CSS Injection Vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0mistune project · mistune26 May 2026
- CVE-2026-5992423İzleyin
Mistune: Arbitrary File Read via Include directive path traversal
OrtaCVSS 5,9İstismar yokEPSS %0mistune project · mistune8 Tem 2026
- CVE-2026-5992721İzleyin
Mistune directives/include: mutual `.. include::` recursion crashes the renderer with `RecursionError`, denial of service via two attacker-controlled markdown f
OrtaCVSS 5,3İstismar yokEPSS %0mistune project · mistune8 Tem 2026
- CVE-2026-5992621İzleyin
Mistune: XSS via unescaped class option in Admonition directive
OrtaCVSS 5,3İstismar yokEPSS %0mistune project · mistune8 Tem 2026
- CVE-2026-4489621İzleyin
Mistune: XSS via unescaped figclass/figwidth in Figure directive
OrtaCVSS 5,3İstismar yokEPSS %0mistune project · mistune26 May 2026
- CVE-2026-5993017İzleyin
Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id="t
OrtaCVSS 4,3İstismar yokEPSS %0mistune project · mistune8 Tem 2026