What’s Vulnerable › Products

facelessuser pymdown-extensions vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your facelessuser pymdown-extensions version is affected

Latest facelessuser pymdown-extensions vulnerabilities

• CVE-2026-67422 — pymdown-extensions: Exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors (CVSS 7.5)
• CVE-2026-61632 — PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path (CVSS 5.3)
• CVE-2026-46338 — PyMdown Extensions: Regression in pymdownx.snippets reintroduces sibling-prefix path traversal bypass despite restrict_base_path (CVSS 4.3)
• CVE-2025-68142 — PyMdown Extensions has ReDOS bug in Figure Capture extension (CVSS 5.3)
• CVE-2023-32309 — Arbitrary file inclusion with the pymdowm-snippets extension (CVSS 7.5)