Threats affecting pkg:brew/iredis

A vulnerability in the Include directive of Mistune allows path traversal via '../' sequences to read arbitrary files outside the intended directory. Additionally, error messages and included file contents are rendered without HTML escaping, causing cross-site scripting (XSS) even when escaping is enabled. This affects versions from 1.11.0 up to but not including 1.16.1_3. The Include plugin must be explicitly enabled to be vulnerable.