Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage

facelessuser vulnerabilities

9 published CVEs name facelessuser among the affected products.

Newest CVEs

  • CVE-2026-85999

    Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace/comment trimming regex `RE_WS_END` (triggers on VALID selectors)

    facelessuser · soupsieve

    Medium5.3
  • CVE-2026-86000

    Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patterns

    facelessuser · soupsieve

    Medium5.3
  • CVE-2026-61632

    PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path

    facelessuser · pymdown-extensions

    Medium5.3
  • CVE-2026-67422

    pymdown-extensions: Exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors

    facelessuser · pymdown-extensions

    High7.5
  • CVE-2026-46338

    PyMdown Extensions: Regression in pymdownx.snippets reintroduces sibling-prefix path traversal bypass despite restrict_base_path

    facelessuser · pymdown-extensions

    Medium4.3
  • CVE-2026-49476

    Soup Sieve: Memory Exhaustion via Large Comma-Separated Selector Lists in soupsieve

    facelessuser · soupsieve

    High7.5
  • CVE-2026-49477

    Soup Sieve: Regular Expression Denial of Service (ReDoS) in soupsieve Selector Parser

    facelessuser · soupsieve

    High7.5
  • CVE-2025-68142

    PyMdown Extensions has ReDOS bug in Figure Capture extension

    facelessuser · pymdown-extensions

    Low2.7
  • CVE-2023-32309

    Arbitrary file inclusion with the pymdowm-snippets extension

    facelessuser · pymdown-extensions

    High7.5