python

Path traversal in mistune's Include directive allows reading arbitrary files outside the intended markdown directory. Affects all versions up to 3.1.4, fixed in 3.3.0.

High-severity sandbox escape in OpenLearnX's Python execution environment allows crafted payloads to break out of the restricted runtime and execute arbitrary commands on the host.