CVE-2026-115350 | lepture Mistune up to 3.2.x Include Directive escape cross site scripting

October 22, 2026 Yanac

A vulnerability has been found in lepture Mistune up to 3.2.x and classified as problematic. This issue affects some unknown processing of the component Include Directive. This manipulation of the argument escape causes cross site scripting.

This vulnerability is tracked as CVE-2026-115350. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More