Cross-site scripting (XSS) vulnerability in the _keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| mistune(PyPI) | 0 | 0.8.1 | N/A |
CVSS Metrics
