python-mistune vulnerabilities (Azure Linux)
14 vulnerabilities.
-
python-mistuneAzure Linux Mistune has Denial of Service — RecursionError via Excessive Emphasis Markers in Markdown 7.5 High -
python-mistuneAzure Linux Mistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitions 7.5 High -
python-mistuneAzure Linux inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs 7.5 High -
python-mistuneAzure Linux Mistune: XSS via unescaped class option in Admonition directive 5.3 Medium -
python-mistuneAzure Linux Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id="toc_N"` content 4.3 Medium -
python-mistuneAzure Linux Mistune plugins/formatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough / mark / insert) 7.5 High -
python-mistuneAzure Linux Mistune: Potential DoS via quadratic-time parsing in parse_link_text 8.7 High -
python-mistuneAzure Linux Mistune Image Directive CSS Injection Vulnerability 4.7 Medium -
python-mistuneAzure Linux Mistune TOC Anchor Injection XSS 6.1 Medium -
python-mistuneAzure Linux Mistune Heading ID Attribute Injection XSS 6.1 Medium -
python-mistuneAzure Linux Mistune: XSS via unescaped figclass/figwidth in Figure directive 5.3 Medium -
python-mistuneAzure Linux Mistune Math Plugin XSS Escape Bypass 6.1 Medium -
python-mistuneAzure Linux Mistune ReDoS in LINK_TITLE_RE allows denial of service with crafted Markdown titles 8.7 High -
python-mistuneAzure Linux Mistune vulnerable to catastrophic backtracking 7.5 High