Cross-site scripting (XSS) vulnerability in the _keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument.
{ "binaries": [ { "binary_name": "python-mistune", "binary_version": "0.7.1-1" }, { "binary_name": "python3-mistune", "binary_version": "0.7.1-1" } ] }