mistune vulnerabilities and fixes
Recent CVEs affecting mistune, with upgrade or downgrade steps. 9 tracked.
mistune has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 9. Most recent: 2026-07-08. Highest priority: CVE-2026-59922 (score 49/100).
- CVE-2026-59922 HIGH 7.5 UPGRADE Mistune is a Python Markdown parser with renderers and plugins
- CVE-2026-59925 HIGH 7.5 UPGRADE Mistune is a Python Markdown parser with renderers and plugins
- CVE-2026-59928 HIGH 7.5 UPGRADE Mistune is a Python Markdown parser with renderers and plugins
- CVE-2026-59924 MEDIUM 5.9 UPGRADE Mistune is a Python Markdown parser with renderers and plugins
- CVE-2026-59927 MEDIUM 5.3 UPGRADE Mistune is a Python Markdown parser with renderers and plugins
- CVE-2026-59923 MEDIUM 6.1 UPGRADE Mistune is a Python Markdown parser with renderers and plugins
- CVE-2026-59929 MEDIUM 6.1 UPGRADE Mistune is a Python Markdown parser with renderers and plugins
- CVE-2026-59926 MEDIUM 6.1 UPGRADE Mistune is a Python Markdown parser with renderers and plugins
- CVE-2026-59930 MEDIUM 4.3 UPGRADE Mistune is a Python Markdown parser with renderers and plugins
FAQ
How do I fix mistune vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mistune being exploited right now?
None of the tracked mistune CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mistune CVE should I patch first?
CVE-2026-59922 currently ranks highest (49/100): Mistune is a Python Markdown parser with renderers and plugins.