Mistune before 3.3.0 Path Traversal via include Directive

Mistune before 3.3.0 Path Traversal and XSS via Include Directive

Mistune before 3.3.0 Quadratic-Time DoS via Unmatched Brackets in Inline Parser

Mistune 3.0.0 before 3.3.0 Denial of Service via Nested Bracket Parsing

Mistune before 3.3.0 Quadratic-Time DoS via parse_link_text

Mistune before 3.3.0 Quadratic Denial of Service via parse_link_text

Mistune has Denial of Service — RecursionError via Excessive Emphasis Markers in Markdown

Mistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitions

inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs

Mistune plugins/formatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough / mark / insert)

Mistune: Potential DoS via quadratic-time parsing in parse_link_text

Mistune ReDoS in LINK_TITLE_RE allows denial of service with crafted Markdown titles

Mistune before 3.3.0 Arbitrary Local File Read via Include Directive

Mistune before 3.3.0 Stored XSS via Include Directive HTML Files

Mistune renderers/html.safe_url: HARMFUL_PROTOCOLS list misses legacy and chained schemes that historically chain to `javascript:` execution

Mistune: XSS via unescaped class option in Admonition directive

Mistune: XSS via percent-encoded javascript URI bypass in safe_url()

Mistune TOC Anchor Injection XSS

Mistune Heading ID Attribute Injection XSS

Mistune Math Plugin XSS Escape Bypass

Mistune Image Directive CSS Injection Vulnerability

Mistune: XSS via unescaped figclass/figwidth in Figure directive

Mistune: Arbitrary File Read via Include directive path traversal

Mistune directives/include: mutual `.. include::` recursion crashes the renderer with `RecursionError`, denial of service via two attacker-controlled markdown files

Mistune 3.2.1 before 3.3.0 CSS Injection via Figure Directive figwidth Option

Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id="toc_N"` content