CVE-2026-44896 | lepture mistune up to 3.2.0 Python Markdown Parser image.py render_figure cross site scripting (GHSA-58cw-g322-p94v)

A vulnerability has been found in lepture mistune up to 3.2.0 and classified as problematic. The impacted element is the function render_figure of the file src/mistune/directives/image.py of the component Python Markdown Parser. Performing a manipulation results in cross site scripting.

This vulnerability was named CVE-2026-44896. The attack may be initiated remotely. There is no available exploit.