CVE-2026-115354 | Lepture Mistune up to 3.2.x Include Directive Markdown.read path traversal

October 22, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Lepture Mistune up to 3.2.x. This affects the function Markdown.read of the component Include Directive. The manipulation leads to path traversal.

This vulnerability is referenced as CVE-2026-115354. Remote exploitation of the attack is possible. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More