Search for packages
| purl | pkg:deb/debian/mistune@0.7.3-1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-3p1d-tfde-6khg
Aliases: CVE-2017-16876 GHSA-98gj-wwxm-cj3h PYSEC-2017-18 |
Cross-site scripting (XSS) vulnerability in the _keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument. |
Affected by 0 other vulnerabilities. |
|
VCID-84bg-nq2n-n3ey
Aliases: CVE-2017-15612 GHSA-hpv5-v8g5-c864 PYSEC-2017-80 |
mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline (such as in java\nscript:) or a crafted email address, related to the escape and autolink functions. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||