Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 573
Alerts This Week
Warning Icon 1 573

Mageia python-mistune Critical DoS HTML Injection Fix 2026-0254

mageia
Calendar Grey July 15, 2026
Dist Mageia Esm H88
Mageia security update for python-mistune addresses two critical issues including HTML injection and CPU exhaustion DoS.
Security update

Summary

Description: The updated python-mistune package fixes two security vulnerablities: Prior to 3.2.1, render_toc_ul() bui...

Read the Full Advisory

References

- https://bugs.mageia.org/show_bug.cgi?id=35773

- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/W4DK3F2DIMTLJEXWFR5UC6EJVGR7KNR5/

- https://github.com/lepture/mistune/security/advisories/GHSA-qcq2-496w-v96p

- https://www.cve.org/CVERecord?id=CVE-2026-44898

- https://www.cve.org/CVERecord?id=CVE-2026-49851

Topics%20covered

Topics Covered

security advisory DoS important html injection Mageia python-mistune

Resolution

SRPMS

- 10/core/python-mistune-3.3.2-1.mga10

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 15 Jul 2026
URL: https://advisories.mageia.org/MGASA-2026-0254.html
Type: security
CVE: CVE-2026-44898, CVE-2026-49851

Topics%20covered

Topics Covered

security advisory DoS important html injection Mageia python-mistune

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.