mkdocs-techdocs-core (>=1.5.3, <=1.5.4), mkdocs-zettelkasten (>=0.2.1, <=0.3.1) potentially affected by CVE-2026-61632 via pymdown-extensions (10.14.3)

pymdown-extensions PYPI version 10.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-techdocs-core =1.5.3, =0.2.1, =0.3.1 Source cves: CVE-2026-61632 Source advisory: OSV:PYSEC-2026-3609...

foundation-cancer-image-biomarker (>=1.0.1a4, <=1.0.1a5), lpw (0.2.5.0) +1 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.12.0)

pymdown-extensions PYPI version 10.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - foundation-cancer-image-biomarker =1.0.1a4, =1.0.1a5 - lpw 0.2.5.0 - quizwiz 1.0.0 Source cves: CVE-2026-61632 Source...

open-webui (>=0.5.17, <=0.6.40), open-webui-steve (0.6.5.45) +1 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.14.2)

pymdown-extensions PYPI version 10.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - open-webui =0.5.17, =0.6.40 - open-webui-steve 0.6.5.45 - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-61632 Sourc...

mkdocs-note (0.0.1), mkdocs-zettelkasten (>=0.4.0, <=0.4.2) +1 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.15.0)

pymdown-extensions PYPI version 10.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-note 0.0.1 - mkdocs-zettelkasten =0.4.0, =0.0.1, =0.0.7 Source cves: CVE-2026-61632 Source advisory:...

lpw (>=0.2.0, <=0.2.4.2) potentially affected by CVE-2026-61632 via pymdown-extensions (10.11.1)

pymdown-extensions PYPI version 10.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - lpw =0.2.0, =0.2.4.2 Source cves: CVE-2026-61632 Source advisory: OSV:PYSEC-2026-3609...

open-webui (0.6.41) potentially affected by CVE-2026-61632 via pymdown-extensions (10.17.2)

pymdown-extensions PYPI version 10.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - open-webui 0.6.41 Source cves: CVE-2026-61632 Source advisory: OSV:PYSEC-2026-3609...

mkdocs-material (8.2.11), mkdocs-techdocs-bandicoot (>=1.1.7, <=1.1.9) +1 more potentially affected by CVE-2026-61632 via pymdown-extensions (9.3.0)

pymdown-extensions PYPI version 9.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-material 8.2.11 - mkdocs-techdocs-bandicoot =1.1.7, =1.0.2, =1.1.7 Source cves: CVE-2026-61632 Source advisory:...

edubotics-core (>=0.1.3, <=0.1.7), lexical-workspace (>=0.1.0, <=0.2.0) +5 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.9.0)

pymdown-extensions PYPI version 10.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - edubotics-core =0.1.3, =0.1.0, =12.0.27, =1.0.1a4, =1.0.0, =1.2.4 Source cves: CVE-2026-61632 Source advisory:...

open-webui (>=0.5.17, <=0.6.40), open-webui-steve (0.6.5.45) +1 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.14.2)

pymdown-extensions PYPI version 10.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - open-webui =0.5.17, =0.6.40 - open-webui-steve 0.6.5.45 - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-61632 Sourc...

PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path

Summary The b64 extension inlines images referenced by as base64 data URIs. When resolving the src path it joins it onto the configured basepath with os.path.normpath and opens the result directly, with no check that the resolved path stays inside basepath. A src containing ../ sequences, or an...

arkindex-base-worker (0.3.7), bestatic (>=0.0.11, <=0.0.30) +18 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.7.1)

pymdown-extensions PYPI version 10.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker 0.3.7 - bestatic =0.0.11, =0.1.0, =0.1.2, =0.3.4, =0.3.7 and more Source cves: CVE-2026-61632 Source...

open-webui (0.6.41) potentially affected by CVE-2026-61632 via pymdown-extensions (10.17.2)

pymdown-extensions PYPI version 10.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - open-webui 0.6.41 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JCX2...

bestatic (>=0.0.34, <=0.0.36), mkdocs-techdocs-core (1.6.1) +1 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.19.1)

pymdown-extensions PYPI version 10.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - bestatic =0.0.34, =0.6.42, =0.6.43 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JCX2...

adeso (>=0.0.1, <=0.0.4), aiagents4pharma (>=0.0.0, <=1.49.1) +194 more potentially affected by CVE-2026-61632 via pymdown-extensions (>=10.0.1, <=10.21.3)

pymdown-extensions PYPI version =10.0.1, =0.0.1, =0.0.0, =0.1.0, =0.10.0, =0.5.0a1, =0.1.0, =0.3.3rc4, =3.1.0, =0.1.0, =0.0.11, =0.0.36 - bias-content 0.1.0 and more Source cves: CVE-2026-61632 Source advisory: GHSA-9XWG-3R6F-JCX2...

arctic-ai (0.1.0), arkindex-base-worker (>=0.3.2rc5, <=0.3.2) potentially affected by CVE-2026-61632 via pymdown-extensions (9.9.2)

pymdown-extensions PYPI version 9.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arctic-ai 0.1.0 - arkindex-base-worker =0.3.2rc5, =0.3.2 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JCX...

mkdocs-techdocs-core (1.2.0) potentially affected by CVE-2026-61632 via pymdown-extensions (9.9.1)

pymdown-extensions PYPI version 9.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-techdocs-core 1.2.0 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JCX2...

arkindex-base-worker (>=0.3.1b1, <=0.3.1rc2), labext-pkg (2.2.0) +3 more potentially affected by CVE-2026-61632 via pymdown-extensions (9.5.0)

pymdown-extensions PYPI version 9.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.1b1, =0.0.4, =0.0.130, =2023.11.4 - stuffpages 0.7.4 Source cves: CVE-2026-61632 Source advisory:...

labext-pkg (2.1.3) potentially affected by CVE-2026-61632 via pymdown-extensions (9.4.0)

pymdown-extensions PYPI version 9.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - labext-pkg 2.1.3 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JCX2...

mkdocs-material (8.2.11), mkdocs-techdocs-bandicoot (>=1.1.7, <=1.1.9) +1 more potentially affected by CVE-2026-61632 via pymdown-extensions (9.3.0)

pymdown-extensions PYPI version 9.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-material 8.2.11 - mkdocs-techdocs-bandicoot =1.1.7, =1.0.2, =1.1.7 Source cves: CVE-2026-61632 Source advisory:...

labext-pkg (2.1.1), mkdocs-techdocs-core (>=0.2.3, <=1.0.1) potentially affected by CVE-2026-61632 via pymdown-extensions (9.0.0)

pymdown-extensions PYPI version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - labext-pkg 2.1.1 - mkdocs-techdocs-core =0.2.3, =1.0.1 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JCX2...