CVE-2026-77088
1 advisory.
PyPI/justhtml CVE-2026-77088: medium 6.1, EPSS 0.26%
justhtml: to_markdown() code-span blank-line breakout enables XSS
Action: Upgrade justhtml to 1.22.0 or later.
pip install justhtml==1.22.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.9.0 | 1.22.0 | - |
Fixed versions
| 1.22.0 |
Sources
- osv: GHSA-jf6w-2mvx-633j
- https://github.com/EmilStenstrom/justhtml/security/advisories/GHSA-jf6w-2mvx-633j
- https://github.com/EmilStenstrom/justhtml
CVE-2026-77088 · published · modified · JSON