CVE-2017-16876

Name of the Vulnerable Software and Affected Versions Mistune versions prior to 0.8.1

Description The issue concerns a Cross-Site Scripting (XSS) vulnerability in the keyify function. This vulnerability allows remote attackers to inject arbitrary web scripts or HTML by exploiting the failure to escape the key argument.

Recommendations For versions prior to 0.8.1, update to version 0.8.1 or later to resolve the issue. As a temporary workaround, consider restricting the input to the keyify function to minimize the risk of exploitation. Avoid using the key argument in sensitive operations until the issue is resolved.