CVE-2026-59929 | lepture mistune up to 3.2.x Safe URL Filter html.py safe_url cross site scripting

A vulnerability was found in lepture mistune up to 3.2.x. It has been classified as problematic. Affected by this issue is the function safe_url of the file src/mistune/renderers/html.py of the component Safe URL Filter. This manipulation causes cross site scripting.

This vulnerability is tracked as CVE-2026-59929. The attack is possible to be carried out remotely. No exploit exists.