< back to search

gpp_maybe Security update for python-mistune
SUSE-SLES-16.0-816

This update for python-mistune fixes the following issues - CVE-2026-33079: ReDoS in `LINK_TITLE_RE` can lead to denial of service via a crafted Markdown (bsc#1264347). - CVE-2026-33441: processing of malformed reference links can lead to excessive resource consumption and denial of service (bsc#1264752). - CVE-2026-44708: improper HTML escaping in the math plugin can lead to XSS (bsc#1264751). - CVE-2026-44896: improper escaping in `render_figure` can lead to attribute injection and XSS (bsc#1264754). - CVE-2026-44897: improper sanitization of user-controlled input in `HTMLRenderer.heading` can lead to XSS (bsc#1264750). - CVE-2026-44898: improper sanitization of user-supplied HTML input in `render_toc_ul` can lead to XSS (bsc#1265052). - CVE-2026-44899: improper input verification in Image directive plugin and improper escaping in `render_block_image` can lead to CSS injection (bsc#1265053).

cloud_download Downloads

SUSE Linux Enterprise Server 16.0 aarch64
  • Packages
    python313-mistune
    Python Markdown parser with renderers and plugins
    3.1.3-160000.3.1 lock rpm
SUSE Linux Enterprise Server 16.0 ppc64le
  • Packages
    python313-mistune
    Python Markdown parser with renderers and plugins
    3.1.3-160000.3.1 lock rpm
SUSE Linux Enterprise Server 16.0 s390x
  • Packages
    python313-mistune
    Python Markdown parser with renderers and plugins
    3.1.3-160000.3.1 lock rpm
SUSE Linux Enterprise Server 16.0 x86_64
  • Packages
    python313-mistune
    Python Markdown parser with renderers and plugins
    3.1.3-160000.3.1 lock rpm
SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le
  • Packages
    python313-mistune
    Python Markdown parser with renderers and plugins
    3.1.3-160000.3.1 lock rpm
SUSE Linux Enterprise Server for SAP applications 16.0 x86_64
  • Packages
    python313-mistune
    Python Markdown parser with renderers and plugins
    3.1.3-160000.3.1 lock rpm