facelessuser pymdown-extensions vulnerabilities
5 published CVEs name facelessuser pymdown-extensions among the affected products.
- 5Published CVEs5 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-61632
PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path
facelessuser · pymdown-extensions
Medium5.3 - CVE-2026-67422
pymdown-extensions: Exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors
facelessuser · pymdown-extensions
High7.5 - CVE-2026-46338
PyMdown Extensions: Regression in pymdownx.snippets reintroduces sibling-prefix path traversal bypass despite restrict_base_path
facelessuser · pymdown-extensions
Medium4.3 - CVE-2025-68142
PyMdown Extensions has ReDOS bug in Figure Capture extension
facelessuser · pymdown-extensions
Low2.7 - CVE-2023-32309
Arbitrary file inclusion with the pymdowm-snippets extension
facelessuser · pymdown-extensions
High7.5