PYSEC-2026-3654 pymdown-extensions: exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors

Summary Four inline processors in pymdown-extensions contain regular expressions with exponential backtracking. A single untrusted Markdown line under 50 bytes drives markdown.markdown into unbounded CPU on the rendering thread seconds at 45 bytes, growing exponentially with each added character...

pymdown-extensions: exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors

SummaryFour inline processors in pymdown-extensions contain regular expressions withexponential backtracking. A single untrusted Markdown line under50 bytes drives markdown.markdown into unbounded CPU on the rendering threadseconds at 45 bytes, growing exponentially with each added character. All...

Regular Expression Denial of Service (ReDoS)

Overview pymdown-extensions is an Extension pack for Python Markdown. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS in the processing of Markdown input by certain inline processors, specifically when handling crafted delimiter runs in the caret,...

GHSA-GM37-52C6-37MW pymdown-extensions: exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors

Summary Four inline processors in pymdown-extensions contain regular expressions with exponential backtracking. A single untrusted Markdown line under 50 bytes drives markdown.markdown into unbounded CPU on the rendering thread seconds at 45 bytes, growing exponentially with each added character...

pymdown-extensions: exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors

Summary Four inline processors in pymdown-extensions contain regular expressions with exponential backtracking. A single untrusted Markdown line under 50 bytes drives markdown.markdown into unbounded CPU on the rendering thread seconds at 45 bytes, growing exponentially with each added character...

CVE-2026-67422

CVE-2026-67422 affects pymdown-extensions up to version 11.0, where four inline processors—caret, tilde, betterem, and magiclink—use regex patterns whose groups can partition delimiter runs in exponentially many ways. This causes catastrophic backtracking and unbounded CPU usage when rendering a ...

CVE-2026-67422 pymdown-extensions: Exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors

pymdown-extensions is a collection of extensions for the Python Markdown library. In versions up to and including 11.0, four inline processors caret, tilde, betterem, and magiclink use regular expressions whose content groups can partition a run of delimiter characters in exponentially many ways,...

CVE-2026-67422 pymdown-extensions: Exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors

pymdown-extensions is a collection of extensions for the Python Markdown library. In versions up to and including 11.0, four inline processors caret, tilde, betterem, and magiclink use regular expressions whose content groups can partition a run of delimiter characters in exponentially many ways,...

CVE-2026-67422: Inefficient Regular Expression Complexity

pymdown-extensions is a collection of extensions for the Python Markdown library. In versions up to and including 11.0, four inline processors caret, tilde, betterem, and magiclink use regular expressions whose content groups can partition a run of delimiter characters in exponentially many ways,...

MiracleLinux 4 : firefox-60.8.0-1.0.1.AXS4 (AXSA:2019-3929:04)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2019-3929:04 advisory. Mozilla: Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8 CVE-2019-11709 Mozilla: Sandbox escape via installation of malicious language...

Malicious code in @caretive/caret-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dbdd6e96adf12b150ce3a286faf8fcab904140af31ec590599a3c1c01a3ba12 The package @caretive/caret-cli was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198875

Malicious code in @caretive/caret-cli npm...

MAL-2025-190802 Malicious code in @caretive/caret-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dbdd6e96adf12b150ce3a286faf8fcab904140af31ec590599a3c1c01a3ba12 The package @caretive/caret-cli was found to contain malicious code. Source: ghsa-malware...

EUVD-2017-6321

Malware in sbrugna...

EUVD-2019-3387

Malware in sbrugna...

EUVD-2020-13056

Malware in sbrugna...

EUVD-2023-49933

Malicious code in bioql PyPI...

Malicious code in test-mlw2-caret-aptly-gulas-sprad (npm)

The package test-mlw2-caret-aptly-gulas-sprad was found to contain malicious code...

MAL-2025-46279 Malicious code in test-mlw2-caret-aptly-gulas-sprad (npm)

The package test-mlw2-caret-aptly-gulas-sprad was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2019-11717

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability exists where the caret ^ character is improperly escaped constructing some URIs due to it being used as a separator, allowing for possible...