Ffacelessuser

Products

Exploited and recent CVEs

• CVE-2026-85999 Medium 5.3 Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace/comment trimming regex `RE_WS_END` (triggers on VALID selectors) 0.6%
• CVE-2026-86000 Medium 5.3 Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patterns 0.6%
• CVE-2026-61632 Medium 5.3 PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path 0.4%
• CVE-2026-67422 High 7.5 pymdown-extensions: Exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors 0.6%
• CVE-2026-46338 Medium 4.3 PyMdown Extensions: Regression in pymdownx.snippets reintroduces sibling-prefix path traversal bypass despite restrict_base_path 0.4%
• CVE-2026-49476 High 7.5 Soup Sieve: Memory Exhaustion via Large Comma-Separated Selector Lists in soupsieve 0.6%
• CVE-2026-49477 High 7.5 Soup Sieve: Regular Expression Denial of Service (ReDoS) in soupsieve Selector Parser 0.6%
• CVE-2025-68142 Low 2.7 PyMdown Extensions has ReDOS bug in Figure Capture extension 0.5%
• CVE-2023-32309 High 7.5 Arbitrary file inclusion with the pymdowm-snippets extension 1.7%