Skip to content
facelessuser pymdown-extensions
-
CVE-2026-61632
Medium 5.3
PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path
0.4%
-
CVE-2026-67422
High 7.5
pymdown-extensions: Exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors
0.6%
-
CVE-2026-46338
Medium 4.3
PyMdown Extensions: Regression in pymdownx.snippets reintroduces sibling-prefix path traversal bypass despite restrict_base_path
0.4%
-
CVE-2025-68142
Low 2.7
PyMdown Extensions has ReDOS bug in Figure Capture extension
0.5%
-
CVE-2023-32309
High 7.5
Arbitrary file inclusion with the pymdowm-snippets extension
1.7%