Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2026-59930 →
DEBIAN-CVE-2026-59930
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the toc plugin and TableOfContents directive generate heading IDs as p...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the toc plugin and TableOfContents directive generate heading IDs as predictable toc_N values without slugifying the heading text, allowing attacker-controlled id="toc_N" content to collide with generated anchors and redirect same-page navigation, CSS selectors, or JavaScript handlers. This issue is fixed in version 3.3.0.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
mistune
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13
mistune
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:14
mistune
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Références
- advisory security-tracker.debian.org