Mistune before 3.3.0 Arbitrary Local File Read via Include Directive

Mistune before 3.3.0 Stored XSS via Include Directive HTML Files

Mistune renderers/html.safe_url: HARMFUL_PROTOCOLS list misses legacy and chained schemes that historically chain to `javascript:` execution

Mistune: XSS via unescaped class option in Admonition directive

Mistune: XSS via percent-encoded javascript URI bypass in safe_url()

Mistune TOC Anchor Injection XSS

Mistune Heading ID Attribute Injection XSS

Mistune Math Plugin XSS Escape Bypass

Mistune Image Directive CSS Injection Vulnerability

Mistune: XSS via unescaped figclass/figwidth in Figure directive

Mistune: Arbitrary File Read via Include directive path traversal

Mistune directives/include: mutual `.. include::` recursion crashes the renderer with `RecursionError`, denial of service via two attacker-controlled markdown files

Mistune 3.2.1 before 3.3.0 CSS Injection via Figure Directive figwidth Option

Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id="toc_N"` content