Vulnerabilities in lepture
28 resultsCVE-2026-44898MEDIUMMistune TOC Anchor Injection XSSEPSS 0.2%CVE-2026-44708MEDIUMMistune Math Plugin XSS Escape BypassEPSS 0.2%CVE-2026-44897MEDIUMMistune Heading ID Attribute Injection XSSEPSS 0.2%CVE-2026-44899MEDIUMMistune Image Directive CSS Injection VulnerabilityEPSS 0.2%CVE-2026-115351MEDIUMMistune 3.2.1 before 3.3.0 CSS Injection via Figure Directive figwidth OptionEPSS 0.2%CVE-2026-44896MEDIUMMistune: XSS via unescaped figclass/figwidth in Figure directiveEPSS 0.2%CVE-2026-59930MEDIUMMistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id="toc_N"` contentEPSS 0.2%CVE-2026-115350MEDIUMMistune before 3.3.0 Stored XSS via Include Directive HTML FilesEPSS 0.2%