adeso (>=0.0.1, <=0.0.4), arkindex-base-worker (>=0.3.3rc4, <=0.3.3) +4 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.0.1)

pymdown-extensions PYPI version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - adeso =0.0.1, =0.3.3rc4, =1.1.0, =1.1.0, =1.2.1, =1.0.0, =1.0.3 Source cves: CVE-2026-61632 Source advisory:...

adze-modeler (0.0.1), arkindex-base-worker (>=0.3.3rc1, <=0.3.3rc3) +27 more potentially affected by CVE-2026-61632 via pymdown-extensions (9.11.0)

pymdown-extensions PYPI version 9.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - adze-modeler 0.0.1 - arkindex-base-worker =0.3.3rc1, =0.2.0, =1.1.3, =0.3.3, =0.1.1, =0.2.4, =2.3.3, =0.4.0, =0.5.0, =0.6.1...

arkindex-base-worker (>=0.3.7rc2, <=0.3.7rc10), mafiagg (>=1.0.0, <=1.0.4) +1 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.7.0)

pymdown-extensions PYPI version 10.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.7rc2, =1.0.0, =0.2.54, =0.2.65 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JC...

arkindex-base-worker (>=0.3.6, <=0.3.7rc1), markdown-live-preview (>=0.2.48, <=0.2.53) +1 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.5.0)

pymdown-extensions PYPI version 10.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.6, =0.2.48, =0.11.0, =0.12.2 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JCX2...

arkindex-base-worker (>=0.3.5rc6, <=0.3.6rc5), mkdocs-techdocs-core (>=1.3.2, <=1.5.0) +1 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.3.1)

pymdown-extensions PYPI version 10.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.5rc6, =1.3.2, =1.5.0 - mkdocs-techdocs-core-alexef 1.4.0 Source cves: CVE-2026-61632 Source...

open-webui (>=0.8.0, <=0.8.8) potentially affected by CVE-2026-61632 via pymdown-extensions (10.20.1)

pymdown-extensions PYPI version 10.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - open-webui =0.8.0, =0.8.8 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JCX2...

open-webui (>=0.7.0, <=0.7.2) potentially affected by CVE-2026-61632 via pymdown-extensions (10.20.0)

pymdown-extensions PYPI version 10.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - open-webui =0.7.0, =0.7.2 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JCX2...

mkdocs-note (0.0.1), mkdocs-zettelkasten (>=0.4.0, <=0.4.2) +1 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.15.0)

pymdown-extensions PYPI version 10.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-note 0.0.1 - mkdocs-zettelkasten =0.4.0, =0.0.1, =0.0.7 Source cves: CVE-2026-61632 Source advisory:...

mkdocs-techdocs-core (1.5.2) potentially affected by CVE-2026-61632 via pymdown-extensions (10.13.0)

pymdown-extensions PYPI version 10.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-techdocs-core 1.5.2 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JCX2...

asn-nmap (0.1.9), iga (>=0.0.1, <=1.0.3) potentially affected by CVE-2026-61632 via pymdown-extensions (9.10.0)

pymdown-extensions PYPI version 9.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - asn-nmap 0.1.9 - iga =0.0.1, =1.0.3 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JCX2...

arkindex-base-worker (>=0.3.2rc1, <=0.3.2rc3), rooster-client (0.0.1) potentially affected by CVE-2026-61632 via pymdown-extensions (9.9.0)

pymdown-extensions PYPI version 9.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.2rc1, =0.3.2rc3 - rooster-client 0.0.1 Source cves: CVE-2026-61632 Source advisory:...

arkindex-base-worker (>=0.3.1rc5, <=0.3.1) potentially affected by CVE-2026-61632 via pymdown-extensions (9.7.0)

pymdown-extensions PYPI version 9.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.1rc5, =0.3.1 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JCX2...

arkindex-base-worker (>=0.3.1rc3, <=0.3.1rc4) potentially affected by CVE-2026-61632 via pymdown-extensions (9.6.0)

pymdown-extensions PYPI version 9.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.1rc3, =0.3.1rc4 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JCX2...

labext-pkg (2.1.2), stuffpages (0.7.3) potentially affected by CVE-2026-61632 via pymdown-extensions (9.1.0)

pymdown-extensions PYPI version 9.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - labext-pkg 2.1.2 - stuffpages 0.7.3 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JCX2...

mkdocs-techdocs-core (>=0.0.6, <=0.0.7) potentially affected by CVE-2026-61632 via pymdown-extensions (8.0.0)

pymdown-extensions PYPI version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-techdocs-core =0.0.6, =0.0.7 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JCX2...

blog-vi (0.2.6), django-apirouter (>=0.1.0, <=0.2.1) +5 more potentially affected by CVE-2026-61632 via pymdown-extensions (7.1.0)

pymdown-extensions PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - blog-vi 0.2.6 - django-apirouter =0.1.0, =2.1.0, =0.0.4, =0.10.2, =1.4.0, =1.7.0 Source cves: CVE-2026-61632 Source advisory...

GHSA-9XWG-3R6F-JCX2 PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path

Summary The b64 extension inlines images referenced by as base64 data URIs. When resolving the src path it joins it onto the configured basepath with os.path.normpath and opens the result directly, with no check that the resolved path stays inside basepath. A src containing ../ sequences, or an...

CVE-2026-46338

A flaw was found in PyMdown Extensions, a tool used for processing Markdown documents. This vulnerability allows an attacker to potentially read sensitive files from unexpected locations on a system. By crafting a special Markdown snippet, an attacker could trick the system into accessing files...

Linux Distros Unpatched Vulnerability : CVE-2023-32309

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. In affected versions an arbitrary file read is possible when using include...

Linux Distros Unpatched Vulnerability : CVE-2026-46338

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. From 10.0.1 until 10.21.3, pymdownx.snippets uses a string-prefix containmen...