https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 11:18:05 +0000 https://vulnerability.circl.lu/vuln/cve-2026-44899 <p><strong>Affected:</strong> lepture mistune</p> <p>Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, the Image directive plugin validates the :width: and :height: options with a regex compiled as _num_re = re.compile(r&#34;^\d+(?:\.\d*)?&#34;). When the validated value is not a plain integer, render_block_image() inserts it directly into a style=&#34;width:...;&#34; or style=&#34;height:...;&#34; attribute. Because the value was accepted by the prefix-only regex, any CSS after the leading digits reaches the style= attribute verbatim and without escaping. This vulnerability is fixed in 3.2.1.</p> <p><strong>Affected:</strong> lepture mistune</p> <p>Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, the Image directive plugin validates the :width: and :height: options with a regex compiled as _num_re = re.compile(r&#34;^\d+(?:\.\d*)?&#34;). When the validated value is not a plain integer, render_block_image() inserts it directly into a style=&#34;width:...;&#34; or style=&#34;height:...;&#34; attribute. Because the value was accepted by the prefix-only regex, any CSS after the leading digits reaches the style= attribute verbatim and without escaping. This vulnerability is fixed in 3.2.1.</p> https://vulnerability.circl.lu/vuln/cve-2026-44899