CVE-2026-115351 | Lepture Mistune up to 3.2.x Figure Directive figwidth cross site scripting

October 22, 2026 Yanac

A vulnerability marked as problematic has been reported in Lepture Mistune up to 3.2.x. This impacts an unknown function of the component Figure Directive. This manipulation of the argument figwidth causes cross site scripting.

This vulnerability is handled as CVE-2026-115351. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More