Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-16876
4.3
MEDIUMCVSS v2
Published
December 29, 2017
Affected
4 projects
Assigned by
MITRE
Severity scale
010
Description
Cross-site scripting (XSS) vulnerability in the _keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument.
lepture/mistune
GitHubA fast yet powerful Python Markdown parser with renderers and plugins.
GitHubA fast yet powerful Python Markdown parser with renderers and plugins.< 0.8.1NVD
Docker Hub
fedora
NPM
RubyGems