Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-3654
  • PyPI/pymdown-extensions
 pymdown-extensions: exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors 10 Aug
  • Fix available
  • Severity - 7.5 (High)
GHSA-gm37-52c6-37mw
  • PyPI/pymdown-extensions
 pymdown-extensions: exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors 07 Aug
  • Fix available
  • Severity - 7.5 (High)
PYSEC-2026-3609
  • PyPI/pymdown-extensions
 PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path 04 Aug
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-9xwg-3r6f-jcx2
  • PyPI/pymdown-extensions
 PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path 24 Jul
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-2999
  • PyPI/pymdown-extensions
 Regression in pymdownx.snippets reintroduces sibling-prefix path traversal bypass despite restrict_base_path 13 Jul
  • Fix available
  • Severity - 4.3 (Medium)
PYSEC-2026-1825
  • PyPI/pymdown-extensions
 PyMdown Extensions has a ReDOS bug in its Figure Capture extension 07 Jul
  • Fix available
  • Severity - 2.7 (Low)
PYSEC-2026-1824
  • PyPI/pymdown-extensions
 Any file can be included with the pymdown-snippets extension 07 Jul
  • Fix available
  • Severity - 7.5 (High)
GHSA-62q4-447f-wv8h
  • PyPI/pymdown-extensions
 Regression in pymdownx.snippets reintroduces sibling-prefix path traversal bypass despite restrict_base_path 19 May
  • Fix available
  • Severity - 4.3 (Medium)
GHSA-r6h4-mm7h-8pmq
  • PyPI/pymdown-extensions
 PyMdown Extensions has a ReDOS bug in its Figure Capture extension 16 Dec 2025
  • Fix available
  • Severity - 2.7 (Low)
GHSA-jh85-wwv9-24hv
  • PyPI/pymdown-extensions
 Any file can be included with the pymdown-snippets extension 15 May 2023
  • Fix available
  • Severity - 7.5 (High)