[ Vendor · 9 CVEs ]
lepture
CVEs affecting lepture published in the last 30 days, plus any lepture CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-115352 | 22 Oct 2026 | CVSS 7.5 | lepture mistuneMistune before 3.3.0 contains an algorithmic complexity vulnerability in the inline link parser that allows unauthenticated attackers to exhaust CPU… | |
| CVE-2026-115353 | 22 Oct 2026 | CVSS 8.6 | lepture mistuneMistune before 3.3.0 contains a path traversal vulnerability in the RST include directive that allows attackers to read arbitrary files by supplying… | |
| CVE-2026-115354 | 22 Oct 2026 | CVSS 6.5 | lepture mistuneMistune before 3.3.0 contains a path traversal vulnerability in the opt-in Include directive that allows attackers to read local files by supplying… | |
| CVE-2026-115355 | 22 Oct 2026 | CVSS 7.5 | lepture mistuneMistune before 3.3.0 contains a path traversal vulnerability in the Include directive that allows attackers to read arbitrary files by supplying ../… | |
| CVE-2026-115347 | 22 Oct 2026 | CVSS 7.5 | lepture mistuneMistune before 3.3.0 contains an inefficient algorithmic complexity vulnerability in parse_link_text that allows remote attackers to cause denial of… | |
| CVE-2026-115348 | 22 Oct 2026 | CVSS 7.5 | lepture mistuneMistune from 3.0.0 before 3.3.0 contains an algorithmic complexity vulnerability in the inline link parser's parse_link_text function that allows… | |
| CVE-2026-115349 | 22 Oct 2026 | CVSS 7.5 | lepture mistuneMistune from 3.0.0 before 3.3.0 contains an algorithmic complexity denial of service vulnerability in the parse_link_text function in… | |
| CVE-2026-115350 | 22 Oct 2026 | CVSS 6.1 | lepture mistuneMistune before 3.3.0 contains a cross-site scripting vulnerability in the Include directive that emits included .html, .xhtml, or .htm file content… | |
| CVE-2026-115351 | 22 Oct 2026 | CVSS 4.7 | lepture mistuneMistune from 3.2.1 before 3.3.0 contains a CSS injection vulnerability that allows attackers controlling markdown input to inject arbitrary style… |