CVE-2026-44896: Mistune has XSS via unescaped figclass/figwidth in Figure directive

May 8, 2026 (updated June 8, 2026)

In src/mistune/directives/image.py, the render_figure() function concatenates figclass and figwidth options directly into HTML attributes without escaping (lines 152-168).

This allows attribute injection and XSS even when HTMLRenderer(escape=True) is used, because these values bypass the inline renderer.

Other attributes in the same file (src, alt, style) are properly escaped; figclass/figwidth were missed.

References

github.com/advisories/GHSA-58cw-g322-p94v
github.com/lepture/mistune/commit/a3cb6e5655308797e8be021d6c7b5bab13cbace2
github.com/lepture/mistune/security/advisories/GHSA-58cw-g322-p94v
github.com/pypa/advisory-database/tree/main/vulns/mistune/PYSEC-2026-168.yaml
nvd.nist.gov/vuln/detail/CVE-2026-44896

Code Behaviors & Features

Detect and mitigate CVE-2026-44896 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →