98 matches found
pymdown-extensions: exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors
SummaryFour inline processors in pymdown-extensions contain regular expressions withexponential backtracking. A single untrusted Markdown line under50 bytes drives markdown.markdown into unbounded CPU on the rendering threadseconds at 45 bytes, growing exponentially with each added character. All...
PYSEC-2026-3654 pymdown-extensions: exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors
Summary Four inline processors in pymdown-extensions contain regular expressions with exponential backtracking. A single untrusted Markdown line under 50 bytes drives markdown.markdown into unbounded CPU on the rendering thread seconds at 45 bytes, growing exponentially with each added character...
Regular Expression Denial of Service (ReDoS)
Overview pymdown-extensions is an Extension pack for Python Markdown. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS in the processing of Markdown input by certain inline processors, specifically when handling crafted delimiter runs in the caret,...
pymdown-extensions: exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors
Summary Four inline processors in pymdown-extensions contain regular expressions with exponential backtracking. A single untrusted Markdown line under 50 bytes drives markdown.markdown into unbounded CPU on the rendering thread seconds at 45 bytes, growing exponentially with each added character...
GHSA-GM37-52C6-37MW pymdown-extensions: exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors
Summary Four inline processors in pymdown-extensions contain regular expressions with exponential backtracking. A single untrusted Markdown line under 50 bytes drives markdown.markdown into unbounded CPU on the rendering thread seconds at 45 bytes, growing exponentially with each added character...
CVE-2026-67422 pymdown-extensions: Exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors
pymdown-extensions is a collection of extensions for the Python Markdown library. In versions up to and including 11.0, four inline processors caret, tilde, betterem, and magiclink use regular expressions whose content groups can partition a run of delimiter characters in exponentially many ways,...
CVE-2026-67422 pymdown-extensions: Exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors
pymdown-extensions is a collection of extensions for the Python Markdown library. In versions up to and including 11.0, four inline processors caret, tilde, betterem, and magiclink use regular expressions whose content groups can partition a run of delimiter characters in exponentially many ways,...
CVE-2026-67422
pymdown-extensions is a collection of extensions for the Python Markdown library. In versions up to and including 11.0, four inline processors caret, tilde, betterem, and magiclink use regular expressions whose content groups can partition a run of delimiter characters in exponentially many ways,...
CVE-2026-67422
CVE-2026-67422 affects pymdown-extensions up to version 11.0, where four inline processors—caret, tilde, betterem, and magiclink—use regex patterns whose groups can partition delimiter runs in exponentially many ways. This causes catastrophic backtracking and unbounded CPU usage when rendering a ...
CVE-2026-67422: Inefficient Regular Expression Complexity
pymdown-extensions is a collection of extensions for the Python Markdown library. In versions up to and including 11.0, four inline processors caret, tilde, betterem, and magiclink use regular expressions whose content groups can partition a run of delimiter characters in exponentially many ways,...
MiracleLinux 4 : firefox-60.8.0-1.0.1.AXS4 (AXSA:2019-3929:04)
The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2019-3929:04 advisory. Mozilla: Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8 CVE-2019-11709 Mozilla: Sandbox escape via installation of malicious language...
MAL-2025-190802 Malicious code in @caretive/caret-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dbdd6e96adf12b150ce3a286faf8fcab904140af31ec590599a3c1c01a3ba12 The package @caretive/caret-cli was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-198875
Malicious code in @caretive/caret-cli npm...
Malicious code in @caretive/caret-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dbdd6e96adf12b150ce3a286faf8fcab904140af31ec590599a3c1c01a3ba12 The package @caretive/caret-cli was found to contain malicious code. Source: ghsa-malware...
EUVD-2017-6321
Malware in sbrugna...
EUVD-2019-3387
Malware in sbrugna...
EUVD-2020-13056
Malware in sbrugna...
EUVD-2023-49933
Malicious code in bioql PyPI...