CVE-2026-111059
1 advisory.
PyPI/mercury CVE-2026-111059: medium 6.1
Mercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTML
Action: Upgrade mercury to 3.2.11 or later.
pip install mercury==3.2.11Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.2.11 | - |
Fixed versions
| 3.2.11 |
Sources
- osv: GHSA-2658-85cv-9wwq
- https://github.com/mljar/mercury/security/advisories/GHSA-2658-85cv-9wwq
- https://github.com/mljar/mercury/commit/c798a85924e6614c6fea7afe5a560e4554a1d09b
- https://github.com/mljar/mercury
- https://github.com/mljar/mercury/releases/tag/v3.2.11
CVE-2026-111059 · published · modified · JSON