6.1

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-44708

CVE-2026-44708: Mistune Math Plugin XSS Escape Bypass

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, the mistune math plugin renders inline math ($...$) and block math ($$...$$) by concatenating the raw user-supplied content directly into the HTML output without any HTML escaping. This occurs even when the parser is explicitly created with escape=True, which is supposed to guarantee that all user-controlled text is sanitised before reaching the DOM. This vulnerability is fixed in 3.2.1.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-44708

CVE-2026-44708:

6.1

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

SSVC / BOD 26-04 ↗

Exploitation pocAutomatable NoTech Impact Partial

Select your environment

→SSVCDeferfix on upgrade

Runtime reachability resolves your actual outcome.Book a demo

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
mistune	pip	<= 3.2.0

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists in the mistune math plugin, where the render_inline_math and render_block_math functions fail to escape user-provided input before rendering it into HTML. The core of the issue is that these functions directly concatenate the text variable, which contains raw content from the markdown, into the final HTML string. This occurs even when the main markdown parser is initialized with escape=True, as the math plugin's rendering path does not adhere to this setting. As a result, any HTML or script tags provided within math delimiters ( $...$ or $$...$$) are rendered as-is by the browser, leading to a cross-site scripting (XSS) vulnerability. An attacker can exploit this to execute arbitrary JavaScript in the victim's browser, potentially stealing cookies, session tokens, or performing actions on their behalf.

Vulnerable functions

render_inline_math

src/mistune/plugins/math.py

The function 'render_inline_math' is vulnerable to XSS because it directly concatenates the raw user-supplied 'text' into the HTML output without any escaping or sanitization. This allows an attacker to inject malicious scripts within inline math delimiters (`$...$`), which will be executed by the browser.

render_block_math

src/mistune/plugins/math.py

The function 'render_block_math' is vulnerable to XSS because it directly concatenates the raw user-supplied 'text' into the HTML output without any escaping or sanitization. This allows an attacker to inject malicious scripts within block math delimiters (`$$...$$`), which will be executed by the browser.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.