{"schema_version":1,"title":"Lepture vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 27 vulnerabilities in Lepture: 0 in the last 7 days and 11 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, Mistune path traversal and XSS in Include directive, was published on 22 October 2026. 10 vulnerabilities in the last four weeks, up from none in the four before. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/lepture","json_url":"https://junglewise.ai/threats/vendors/lepture.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/lepture","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":false,"counts":{"high":13,"all_time":27,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":10,"last_90_days":11,"last_365_days":27},"latest":[{"cvss":7.5,"slug":"duplicate-advisory-mistune-path-traversal-and-xss-in-include-directive-bf25c187","title":"Mistune path traversal and XSS in Include directive","severity":"high","exploited":false,"published_at":"2026-10-22T21:32:36+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-mistune-path-traversal-and-xss-in-include-directive-bf25c187"},{"cve":"CVE-2026-115355","cvss":7.5,"epss":0.0039,"slug":"cve-2026-115355-mistune-before-3-3-0-contains-a-path-traversal-vulnerability-in","title":"Mistune path traversal and XSS in Include directive","severity":"high","exploited":false,"published_at":"2026-10-22T19:17:41.52+00:00","url":"https://junglewise.ai/threats/cve-2026-115355-mistune-before-3-3-0-contains-a-path-traversal-vulnerability-in"},{"cve":"CVE-2026-115354","cvss":6.5,"slug":"cve-2026-115354-mistune-before-3-3-0-contains-a-path-traversal-vulnerability-in","title":"Mistune path traversal in Include directive","severity":"medium","exploited":false,"published_at":"2026-10-22T19:17:41.373+00:00","url":"https://junglewise.ai/threats/cve-2026-115354-mistune-before-3-3-0-contains-a-path-traversal-vulnerability-in"},{"cve":"CVE-2026-115353","cvss":8.6,"slug":"cve-2026-115353-mistune-before-3-3-0-contains-a-path-traversal-vulnerability-in","title":"Mistune path traversal in RST include directive","severity":"high","exploited":false,"published_at":"2026-10-22T19:17:41.227+00:00","url":"https://junglewise.ai/threats/cve-2026-115353-mistune-before-3-3-0-contains-a-path-traversal-vulnerability-in"},{"cve":"CVE-2026-115352","cvss":7.5,"slug":"cve-2026-115352-mistune-before-3-3-0-contains-an-algorithmic-complexity","title":"Mistune algorithmic complexity DoS in inline link parser","severity":"high","exploited":false,"published_at":"2026-10-22T19:17:41.077+00:00","url":"https://junglewise.ai/threats/cve-2026-115352-mistune-before-3-3-0-contains-an-algorithmic-complexity"},{"cve":"CVE-2026-115351","cvss":4.7,"slug":"cve-2026-115351-mistune-from-3-2-1-before-3-3-0-contains-a-css-injection","title":"Mistune CSS injection in figure directive","severity":"medium","exploited":false,"published_at":"2026-10-22T19:17:40.92+00:00","url":"https://junglewise.ai/threats/cve-2026-115351-mistune-from-3-2-1-before-3-3-0-contains-a-css-injection"},{"cve":"CVE-2026-115350","cvss":6.1,"slug":"cve-2026-115350-mistune-before-3-3-0-contains-a-cross-site-scripting","title":"Mistune cross-site scripting in Include directive for HTML files","severity":"medium","exploited":false,"published_at":"2026-10-22T19:17:40.767+00:00","url":"https://junglewise.ai/threats/cve-2026-115350-mistune-before-3-3-0-contains-a-cross-site-scripting"},{"cve":"CVE-2026-115349","cvss":7.5,"slug":"cve-2026-115349-mistune-from-3-0-0-before-3-3-0-contains-an-algorithmic","title":"Mistune ReDoS in parse_link_text function","severity":"high","exploited":false,"published_at":"2026-10-22T19:17:40.597+00:00","url":"https://junglewise.ai/threats/cve-2026-115349-mistune-from-3-0-0-before-3-3-0-contains-an-algorithmic"},{"cve":"CVE-2026-115348","cvss":7.5,"slug":"cve-2026-115348-mistune-from-3-0-0-before-3-3-0-contains-an-algorithmic","title":"Mistune algorithmic complexity DoS in inline link parser","severity":"high","exploited":false,"published_at":"2026-10-22T19:17:40.43+00:00","url":"https://junglewise.ai/threats/cve-2026-115348-mistune-from-3-0-0-before-3-3-0-contains-an-algorithmic"},{"cve":"CVE-2026-115347","cvss":7.5,"slug":"cve-2026-115347-mistune-before-3-3-0-contains-an-inefficient-algorithmic","title":"Mistune parse_link_text quadratic denial of service","severity":"high","exploited":false,"published_at":"2026-10-22T19:17:40.267+00:00","url":"https://junglewise.ai/threats/cve-2026-115347-mistune-before-3-3-0-contains-an-inefficient-algorithmic"},{"cve":"CVE-2026-76098","cvss":7.5,"epss":0.0049,"slug":"cve-2026-76098-mistune-uncontrolled-recursion-in-html-rendering","title":"Mistune uncontrolled recursion in HTML rendering","severity":"high","exploited":false,"published_at":"2026-08-24T20:17:19.33+00:00","url":"https://junglewise.ai/threats/cve-2026-76098-mistune-uncontrolled-recursion-in-html-rendering"},{"cve":"CVE-2026-59930","cvss":4.3,"epss":0.0019,"slug":"cve-2026-59930-lepture-mistune-predictable-id-generation-in-toc-plugin","title":"lepture Mistune predictable ID generation in TOC plugin","severity":"medium","exploited":false,"published_at":"2026-07-08T17:17:28.867+00:00","url":"https://junglewise.ai/threats/cve-2026-59930-lepture-mistune-predictable-id-generation-in-toc-plugin"},{"cve":"CVE-2026-59929","cvss":6.1,"epss":0.0034,"slug":"cve-2026-59929-lepture-mistune-xss-via-incomplete-url-scheme-filtering-in-html","title":"lepture mistune XSS via incomplete URL scheme filtering in HTML renderer","severity":"medium","exploited":false,"published_at":"2026-07-08T17:17:28.737+00:00","url":"https://junglewise.ai/threats/cve-2026-59929-lepture-mistune-xss-via-incomplete-url-scheme-filtering-in-html"},{"cve":"CVE-2026-59928","cvss":7.5,"epss":0.0065,"slug":"cve-2026-59928-lepture-mistune-denial-of-service-in-reference-link-parsing","title":"lepture Mistune denial of service in reference-link parsing","severity":"high","exploited":false,"published_at":"2026-07-08T17:17:28.6+00:00","url":"https://junglewise.ai/threats/cve-2026-59928-lepture-mistune-denial-of-service-in-reference-link-parsing"},{"cve":"CVE-2026-59927","cvss":5.3,"epss":0.0053,"slug":"cve-2026-59927-lepture-mistune-uncontrolled-recursion-in-include-directive","title":"lepture Mistune uncontrolled recursion in Include directive","severity":"medium","exploited":false,"published_at":"2026-07-08T17:17:28.45+00:00","url":"https://junglewise.ai/threats/cve-2026-59927-lepture-mistune-uncontrolled-recursion-in-include-directive"},{"cve":"CVE-2026-59926","cvss":4,"epss":0.0033,"slug":"cve-2026-59926-lepture-mistune-xss-in-admonition-directive","title":"lepture Mistune XSS in Admonition directive","severity":"medium","exploited":false,"published_at":"2026-07-08T17:17:28.323+00:00","url":"https://junglewise.ai/threats/cve-2026-59926-lepture-mistune-xss-in-admonition-directive"},{"cve":"CVE-2026-59925","cvss":7.5,"epss":0.0064,"slug":"cve-2026-59925-mistune-denial-of-service-via-quadratic-emphasis-parsing","title":"Mistune denial of service via quadratic emphasis parsing","severity":"high","exploited":false,"published_at":"2026-07-08T17:17:28.183+00:00","url":"https://junglewise.ai/threats/cve-2026-59925-mistune-denial-of-service-via-quadratic-emphasis-parsing"},{"cve":"CVE-2026-59924","cvss":5.9,"epss":0.0046,"slug":"cve-2026-59924-lepture-mistune-path-traversal-in-include-directive","title":"lepture Mistune path traversal in Include directive","severity":"medium","exploited":false,"published_at":"2026-07-08T17:17:28.05+00:00","url":"https://junglewise.ai/threats/cve-2026-59924-lepture-mistune-path-traversal-in-include-directive"},{"cve":"CVE-2026-59923","cvss":6.1,"epss":0.0035,"slug":"cve-2026-59923-lepture-mistune-xss-via-percent-encoded-bypass-in-safe-url","title":"lepture Mistune XSS via percent-encoded bypass in safe_url","severity":"medium","exploited":false,"published_at":"2026-07-08T17:17:27.91+00:00","url":"https://junglewise.ai/threats/cve-2026-59923-lepture-mistune-xss-via-percent-encoded-bypass-in-safe-url"},{"cve":"CVE-2026-59922","cvss":7.5,"epss":0.0064,"slug":"cve-2026-59922-lepture-mistune-denial-of-service-in-formatting-plugins","title":"lepture Mistune denial of service in formatting plugins","severity":"high","exploited":false,"published_at":"2026-07-08T17:17:27.77+00:00","url":"https://junglewise.ai/threats/cve-2026-59922-lepture-mistune-denial-of-service-in-formatting-plugins"},{"cve":"CVE-2026-49851","cvss":7.5,"epss":0.0063,"slug":"cve-2026-49851-lepture-mistune-cpu-exhaustion-dos-in-parse-link-text","title":"lepture Mistune CPU exhaustion DoS in parse_link_text","severity":"high","exploited":false,"published_at":"2026-06-24T18:17:18.937+00:00","url":"https://junglewise.ai/threats/cve-2026-49851-lepture-mistune-cpu-exhaustion-dos-in-parse-link-text"},{"cve":"CVE-2026-44899","cvss":4.7,"epss":0.0027,"slug":"cve-2026-44899-lepture-mistune-css-injection-in-image-directive-plugin","title":"lepture Mistune CSS injection in Image directive plugin","severity":"medium","exploited":false,"published_at":"2026-05-26T21:16:39.953+00:00","url":"https://junglewise.ai/threats/cve-2026-44899-lepture-mistune-css-injection-in-image-directive-plugin"},{"cve":"CVE-2026-44898","cvss":6.1,"epss":0.0027,"slug":"cve-2026-44898-lepture-mistune-xss-in-table-of-contents-generation","title":"lepture Mistune XSS in Table of Contents generation","severity":"medium","exploited":false,"published_at":"2026-05-26T21:16:39.81+00:00","url":"https://junglewise.ai/threats/cve-2026-44898-lepture-mistune-xss-in-table-of-contents-generation"},{"cve":"CVE-2026-44897","cvss":6.1,"epss":0.0027,"slug":"cve-2026-44897-mistune-xss-via-unsanitized-heading-id-attribute","title":"Mistune XSS via unsanitized heading ID attribute","severity":"medium","exploited":false,"published_at":"2026-05-26T21:16:39.657+00:00","url":"https://junglewise.ai/threats/cve-2026-44897-mistune-xss-via-unsanitized-heading-id-attribute"},{"cve":"CVE-2026-44896","cvss":6.1,"epss":0.0027,"slug":"cve-2026-44896-lepture-mistune-xss-in-figure-directive-image-attributes","title":"lepture Mistune XSS in Figure directive image attributes","severity":"medium","exploited":false,"published_at":"2026-05-26T21:16:39.477+00:00","url":"https://junglewise.ai/threats/cve-2026-44896-lepture-mistune-xss-in-figure-directive-image-attributes"}],"vendor":{"hub":true,"name":"Lepture","slug":"lepture","description":"Software developer who maintains open source projects including the mistune Markdown parser.","url":"https://junglewise.ai/threats/vendors/lepture"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":10},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-115353","cvss":8.6,"slug":"cve-2026-115353-mistune-before-3-3-0-contains-a-path-traversal-vulnerability-in","title":"Mistune path traversal in RST include directive","severity":"high","exploited":false,"published_at":"2026-10-22T19:17:41.227+00:00","url":"https://junglewise.ai/threats/cve-2026-115353-mistune-before-3-3-0-contains-a-path-traversal-vulnerability-in"},{"cve":"CVE-2026-33079","cvss":7.5,"epss":0.007,"slug":"cve-2026-33079-mistune-redos-in-link-title-re","title":"Mistune ReDoS in LINK_TITLE_RE","severity":"high","exploited":false,"published_at":"2026-05-06T18:16:03.097+00:00","url":"https://junglewise.ai/threats/cve-2026-33079-mistune-redos-in-link-title-re"},{"cve":"CVE-2026-59928","cvss":7.5,"epss":0.0065,"slug":"cve-2026-59928-lepture-mistune-denial-of-service-in-reference-link-parsing","title":"lepture Mistune denial of service in reference-link parsing","severity":"high","exploited":false,"published_at":"2026-07-08T17:17:28.6+00:00","url":"https://junglewise.ai/threats/cve-2026-59928-lepture-mistune-denial-of-service-in-reference-link-parsing"},{"cve":"CVE-2026-59925","cvss":7.5,"epss":0.0064,"slug":"cve-2026-59925-mistune-denial-of-service-via-quadratic-emphasis-parsing","title":"Mistune denial of service via quadratic emphasis parsing","severity":"high","exploited":false,"published_at":"2026-07-08T17:17:28.183+00:00","url":"https://junglewise.ai/threats/cve-2026-59925-mistune-denial-of-service-via-quadratic-emphasis-parsing"},{"cve":"CVE-2026-59922","cvss":7.5,"epss":0.0064,"slug":"cve-2026-59922-lepture-mistune-denial-of-service-in-formatting-plugins","title":"lepture Mistune denial of service in formatting plugins","severity":"high","exploited":false,"published_at":"2026-07-08T17:17:27.77+00:00","url":"https://junglewise.ai/threats/cve-2026-59922-lepture-mistune-denial-of-service-in-formatting-plugins"},{"cve":"CVE-2026-49851","cvss":7.5,"epss":0.0063,"slug":"cve-2026-49851-lepture-mistune-cpu-exhaustion-dos-in-parse-link-text","title":"lepture Mistune CPU exhaustion DoS in parse_link_text","severity":"high","exploited":false,"published_at":"2026-06-24T18:17:18.937+00:00","url":"https://junglewise.ai/threats/cve-2026-49851-lepture-mistune-cpu-exhaustion-dos-in-parse-link-text"},{"cve":"CVE-2026-76098","cvss":7.5,"epss":0.0049,"slug":"cve-2026-76098-mistune-uncontrolled-recursion-in-html-rendering","title":"Mistune uncontrolled recursion in HTML rendering","severity":"high","exploited":false,"published_at":"2026-08-24T20:17:19.33+00:00","url":"https://junglewise.ai/threats/cve-2026-76098-mistune-uncontrolled-recursion-in-html-rendering"},{"cve":"CVE-2026-115355","cvss":7.5,"epss":0.0039,"slug":"cve-2026-115355-mistune-before-3-3-0-contains-a-path-traversal-vulnerability-in","title":"Mistune path traversal and XSS in Include directive","severity":"high","exploited":false,"published_at":"2026-10-22T19:17:41.52+00:00","url":"https://junglewise.ai/threats/cve-2026-115355-mistune-before-3-3-0-contains-a-path-traversal-vulnerability-in"},{"cvss":7.5,"slug":"duplicate-advisory-mistune-path-traversal-and-xss-in-include-directive-bf25c187","title":"Mistune path traversal and XSS in Include directive","severity":"high","exploited":false,"published_at":"2026-10-22T21:32:36+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-mistune-path-traversal-and-xss-in-include-directive-bf25c187"},{"cve":"CVE-2026-115352","cvss":7.5,"slug":"cve-2026-115352-mistune-before-3-3-0-contains-an-algorithmic-complexity","title":"Mistune algorithmic complexity DoS in inline link parser","severity":"high","exploited":false,"published_at":"2026-10-22T19:17:41.077+00:00","url":"https://junglewise.ai/threats/cve-2026-115352-mistune-before-3-3-0-contains-an-algorithmic-complexity"}],"generated_at":"2026-11-09T03:07:00.176479+00:00","technologies":[{"name":"Lepture Mistune","slug":"lepture-mistune","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/lepture-mistune"}]}