Mistune

Mistune directives/include: mutual `.. include::` recursion crashes the renderer with `RecursionError`, denial of service via two attacker-controlled markdown files

Mistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitions

Mistune: Arbitrary File Read via Include directive path traversal

Mistune renderers/html.safe_url: HARMFUL_PROTOCOLS list misses legacy and chained schemes that historically chain to `javascript:` execution

inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs

Mistune: XSS via unescaped class option in Admonition directive

Mistune: XSS via percent-encoded javascript URI bypass in safe_url()

Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id="toc_N"` content

Mistune plugins/formatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough / mark / insert)