diff --git a/poetry.lock b/poetry.lock
index 470e8a6a..ff63c70f 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -1135,6 +1135,7 @@ WTForms = "*"
 reference = "bf5338ec8a8ad6cbca5b6991fced3de978aa3966"
 type = "git"
 url = "https://github.com/rero/flask-wiki.git"
+
 [[package]]
 category = "main"
 description = "Form rendering, validation, and CSRF protection for Flask with WTForms."
@@ -1398,7 +1399,7 @@ optional = true
 version = ">=1.2.5,<1.3.0"
 
 [package.dependencies.invenio-db]
-extras = ["versioning", "postgresql"]
+extras = ["postgresql", "versioning"]
 optional = true
 version = ">=1.0.8,<1.1.0"
 
@@ -1915,6 +1916,7 @@ tests = ["check-manifest (>=0.35)", "coverage (>=4.3.4)", "isort (4.2.2)", "mock
 reference = "fe55e095a8e78b36cfad875f752f2facc2908bae"
 type = "git"
 url = "https://github.com/inveniosoftware/invenio-oaiharvester.git"
+
 [[package]]
 category = "main"
 description = "Invenio module that implements OAI-PMH server."
@@ -1949,6 +1951,7 @@ tests = ["SQLAlchemy-Continuum (>=1.3.6)", "SQLAlchemy (>=1.2.18,<1.4.0)", "SQLA
 reference = "447f7f138042a16ae437310ca7f4260ca029f18f"
 type = "git"
 url = "https://github.com/rero/invenio-oaiserver.git"
+
 [[package]]
 category = "main"
 description = "Invenio module that implements OAuth 2 server."
@@ -2916,11 +2919,11 @@ maxminddb = "*"
 
 [[package]]
 category = "main"
-description = "A sane Markdown parser with useful plugins and renderers"
+description = "The fastest markdown parser in pure Python"
 name = "mistune"
 optional = false
 python-versions = "*"
-version = "2.0.2"
+version = "0.8.4"
 
 [[package]]
 category = "dev"
@@ -4123,7 +4126,7 @@ wsproto = ">=0.14"
 [[package]]
 category = "main"
 description = "Backported and Experimental Type Hints for Python 3.6+"
-marker = "python_version < \"3.8\" or python_version >= \"3.7\" and python_version < \"3.8\""
+marker = "python_version < \"3.8\" or python_version >= \"3.7\" and python_version < \"3.8\" and (python_version >= \"3.7\" and python_version < \"3.8\" or python_version < \"3.8\") or python_version >= \"3.7\" and python_version < \"3.8\""
 name = "typing-extensions"
 optional = false
 python-versions = ">=3.6"
@@ -4396,7 +4399,7 @@ version = "0.12.0"
 [[package]]
 category = "main"
 description = "Backport of pathlib-compatible object wrapper for zip files"
-marker = "python_version < \"3.8\""
+marker = "python_version < \"3.9\""
 name = "zipp"
 optional = false
 python-versions = ">=3.6"
@@ -4409,7 +4412,7 @@ testing = ["pytest (>=4.6)", "pytest-checkdocs (>=2.4)", "pytest-flake8", "pytes
 [[package]]
 category = "main"
 description = "Backport of pathlib-compatible object wrapper for zip files"
-marker = "python_version >= \"3.7\" and python_version < \"3.8\" or python_version < \"3.9\""
+marker = "python_version >= \"3.7\" and python_version < \"3.8\" and (python_version >= \"3.7\" and python_version < \"3.8\" or python_version < \"3.10\") or python_version >= \"3.7\" and python_version < \"3.8\" or python_version < \"3.10\""
 name = "zipp"
 optional = false
 python-versions = ">=3.7"
@@ -4420,7 +4423,7 @@ docs = ["sphinx", "jaraco.packaging (>=8.2)", "rst.linker (>=1.9)"]
 testing = ["pytest (>=6)", "pytest-checkdocs (>=2.4)", "pytest-flake8", "pytest-cov", "pytest-enabler (>=1.0.1)", "jaraco.itertools", "func-timeout", "pytest-black (>=0.3.7)", "pytest-mypy"]
 
 [metadata]
-content-hash = "e172857d54e3d558afc20b085fc80bc4d807a935946cca830f8e0d169c8f2cd3"
+content-hash = "1234168b2bf091ca3f4c291407c9c2d39e97aa9c31ea1408b8c9b6996c5fe18a"
 lock-version = "1.0"
 python-versions = ">= 3.6, <3.8"
 
@@ -5277,8 +5280,8 @@ maxminddb-geolite2 = [
     {file = "maxminddb-geolite2-2018.703.tar.gz", hash = "sha256:2bd118c5567f3a8323d6c5da23a6e6d52cfc09cd9987b54eb712cf6001a96e03"},
 ]
 mistune = [
-    {file = "mistune-2.0.2-py2.py3-none-any.whl", hash = "sha256:6bab6c6abd711c4604206c7d8cad5cd48b28f072b4bb75797d74146ba393a049"},
-    {file = "mistune-2.0.2.tar.gz", hash = "sha256:6fc88c3cb49dba8b16687b41725e661cf85784c12e8974a29b9d336dd596c3a1"},
+    {file = "mistune-0.8.4-py2.py3-none-any.whl", hash = "sha256:88a1051873018da288eee8538d476dffe1262495144b33ecb586c4ab266bb8d4"},
+    {file = "mistune-0.8.4.tar.gz", hash = "sha256:59a3429db53c50b5c6bcc8a07f8848cb00d7dc8bdb431a4ab41920d201d4756e"},
 ]
 mock = [
     {file = "mock-4.0.3-py3-none-any.whl", hash = "sha256:122fcb64ee37cfad5b3f48d7a7d51875d7031aaf3d8be7c42e2bee25044eee62"},
diff --git a/pyproject.toml b/pyproject.toml
index a206ccc7..83e868c0 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -54,6 +54,7 @@ pillow = ">=8.3.2"
 # `unexpected keyword argument 'ignore_result'` is solved in version 5.0.6
 celery = "5.0.5"
 jedi = "<0.18.0"
+mistune = "<2.0.0"
 
 [tool.poetry.dev-dependencies]
 Flask-Debugtoolbar = ">=0.10.1"