Search for packages
| purl | pkg:pypi/mistune@0.8.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-3p1d-tfde-6khg | Cross-site scripting (XSS) vulnerability in the _keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument. |
CVE-2017-16876
GHSA-98gj-wwxm-cj3h PYSEC-2017-18 |