arkindex-base-worker (>=0.3.2rc1, <=0.3.2rc3), rooster-client (0.0.1) potentially affected by CVE-2025-68142 via pymdown-extensions (9.9.0)

pymdown-extensions PYPI version 9.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.2rc1, =0.3.2rc3 - rooster-client 0.0.1 Source cves: CVE-2025-68142 Source advisory:...

arkindex-base-worker (>=0.3.1rc5, <=0.3.1) potentially affected by CVE-2025-68142 via pymdown-extensions (9.7.0)

pymdown-extensions PYPI version 9.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.1rc5, =0.3.1 Source cves: CVE-2025-68142 Source advisory: OSV:PYSEC-2026-1825...

arkindex-base-worker (>=0.3.1rc3, <=0.3.1rc4) potentially affected by CVE-2025-68142 via pymdown-extensions (9.6.0)

pymdown-extensions PYPI version 9.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.1rc3, =0.3.1rc4 Source cves: CVE-2025-68142 Source advisory: OSV:PYSEC-2026-1825...

arkindex-base-worker (>=0.3.1b1, <=0.3.1rc2), labext-pkg (2.2.0) +3 more potentially affected by CVE-2025-68142 via pymdown-extensions (9.5.0)

pymdown-extensions PYPI version 9.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.1b1, =0.0.4, =0.0.130, =2023.11.4 - stuffpages 0.7.4 Source cves: CVE-2025-68142 Source advisory:...

labext-pkg (2.1.3) potentially affected by CVE-2025-68142 via pymdown-extensions (9.4.0)

pymdown-extensions PYPI version 9.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - labext-pkg 2.1.3 Source cves: CVE-2025-68142 Source advisory: OSV:PYSEC-2026-1825...

mkdocs-material (8.2.11), mkdocs-techdocs-bandicoot (>=1.1.7, <=1.1.9) +1 more potentially affected by CVE-2025-68142 via pymdown-extensions (9.3.0)

pymdown-extensions PYPI version 9.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-material 8.2.11 - mkdocs-techdocs-bandicoot =1.1.7, =1.0.2, =1.1.7 Source cves: CVE-2025-68142 Source advisory:...

labext-pkg (2.1.2), stuffpages (0.7.3) potentially affected by CVE-2025-68142 via pymdown-extensions (9.1.0)

pymdown-extensions PYPI version 9.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - labext-pkg 2.1.2 - stuffpages 0.7.3 Source cves: CVE-2025-68142 Source advisory: OSV:PYSEC-2026-1825...

labext-pkg (2.1.1), mkdocs-techdocs-core (>=0.2.3, <=1.0.1) potentially affected by CVE-2025-68142 via pymdown-extensions (9.0.0)

pymdown-extensions PYPI version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - labext-pkg 2.1.1 - mkdocs-techdocs-core =0.2.3, =1.0.1 Source cves: CVE-2025-68142 Source advisory: OSV:PYSEC-2026-1825...

dike (>=0.1.0, <=0.4.0), liara (>=2.1.0, <=2.3.2) +9 more potentially affected by CVE-2025-68142 via pymdown-extensions (8.2.0)

pymdown-extensions PYPI version 8.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - dike =0.1.0, =2.1.0, =0.1.0, =0.19.1, =0.13.0, =0.3.0, =2.2.0, =0.1.0, =0.1.6 Source cves: CVE-2025-68142 Source advisory:...

mkdocs-meta-descriptions-plugin (>=0.0.3, <=0.0.4) potentially affected by CVE-2025-68142 via pymdown-extensions (8.1.1)

pymdown-extensions PYPI version 8.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-meta-descriptions-plugin =0.0.3, =0.0.4 Source cves: CVE-2025-68142 Source advisory: OSV:PYSEC-2026-1825...

mkdocs-techdocs-core (>=0.0.6, <=0.0.7) potentially affected by CVE-2025-68142 via pymdown-extensions (8.0.0)

pymdown-extensions PYPI version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-techdocs-core =0.0.6, =0.0.7 Source cves: CVE-2025-68142 Source advisory: OSV:PYSEC-2026-1825...

blog-vi (0.2.6), django-apirouter (>=0.1.0, <=0.2.1) +5 more potentially affected by CVE-2025-68142 via pymdown-extensions (7.1.0)

pymdown-extensions PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - blog-vi 0.2.6 - django-apirouter =0.1.0, =2.1.0, =0.0.4, =0.10.2, =1.4.0, =1.7.0 Source cves: CVE-2025-68142 Source advisory...

liara (>=2.0.0a7, <=2.0.7), mkdocs-kpn (>=0.15.0, <=0.18.3) +4 more potentially affected by CVE-2025-68142 via pymdown-extensions (6.3.0)

pymdown-extensions PYPI version 6.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - liara =2.0.0a7, =0.15.0, =0.0.5, =4.0.0, =7.0.4 - thea 0.0.1 Source cves: CVE-2025-68142 Source advisory: OSV:PYSEC-2026-182...

docwriter (1.2.0), liara (>=2.0.0a1, <=2.0.0a6) +1 more potentially affected by CVE-2025-68142 via pymdown-extensions (6.2.1)

pymdown-extensions PYPI version 6.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - docwriter 1.2.0 - liara =2.0.0a1, =4.5.0, =4.6.0 Source cves: CVE-2025-68142 Source advisory: OSV:PYSEC-2026-1825...

adeso (>=0.0.1, <=0.0.4), anoteai (>=0.10.0, <=0.20.0) +70 more potentially affected by CVE-2025-68142 via pymdown-extensions (>=10.0.1, <=10.15.0)

pymdown-extensions PYPI version =10.0.1, =0.0.1, =0.10.0, =0.3.3rc4, =0.0.11, =0.1.0, =0.1.1 - bias-ext-approval 0.1.0 - bias-ext-discussions 0.1.0 - bias-ext-emoji 0.1.0 - bias-ext-flags 0.1.0 - bias-ext-likes 0.1.0 - bias-ext-mentions 0.1.0 - bias-ext-notifications 0.1.0 - bias-ext-posts 0.1.0 ...

adze-modeler (0.0.1), arctic-ai (0.1.0) +59 more potentially affected by CVE-2023-32309 via pymdown-extensions (>=4.11.0, <=9.11.0)

pymdown-extensions PYPI version =4.11.0, =0.3.1b1, =0.2.0, =1.1.3, =0.1.0, =0.1.0, =0.1.0, =0.9.1, =0.9.0, =0.9.0, =0.3.3, =0.3.4.1 and more Source cves: CVE-2023-32309 Source advisory: OSV:PYSEC-2026-1824...

Directory Traversal

Overview pymdown-extensions is an Extension pack for Python Markdown. Affected versions of this package are vulnerable to Directory Traversal in the getsnippetpath function. An attacker can access arbitrary files outside the intended directory by crafting a path that exploits improper directory...

adeso (>=0.0.1, <=0.0.4), anoteai (>=0.10.0, <=0.20.0) +72 more potentially affected by CVE-2023-32309 +1 more via pymdown-extensions (>=10.0.1, <=10.21.2)

pymdown-extensions PYPI version =10.0.1, =0.0.1, =0.10.0, =0.3.3rc4, =3.1.0, =0.0.11, =0.1.0, =0.1.1 - bias-ext-approval 0.1.0 - bias-ext-discussions 0.1.0 - bias-ext-emoji 0.1.0 - bias-ext-flags 0.1.0 - bias-ext-likes 0.1.0 - bias-ext-mentions 0.1.0 - bias-ext-notifications 0.1.0 - bias-ext-post...

adeso (>=0.0.1, <=0.0.4), anoteai (>=0.10.0, <=0.20.0) +72 more potentially affected by CVE-2026-46338 via pymdown-extensions (>=10.0.1, <=10.21.2)

pymdown-extensions PYPI version =10.0.1, =0.0.1, =0.10.0, =0.3.3rc4, =3.1.0, =0.0.11, =0.1.0, =0.1.1 - bias-ext-approval 0.1.0 - bias-ext-discussions 0.1.0 - bias-ext-emoji 0.1.0 - bias-ext-flags 0.1.0 - bias-ext-likes 0.1.0 - bias-ext-mentions 0.1.0 - bias-ext-notifications 0.1.0 - bias-ext-post...

adeso (>=0.0.1, <=0.0.4), anoteai (>=0.10.0, <=0.20.0) +72 more potentially affected by CVE-2023-32309 +1 more via pymdown-extensions (>=10.0.1, <=10.21.2)

pymdown-extensions PYPI version =10.0.1, =0.0.1, =0.10.0, =0.3.3rc4, =3.1.0, =0.0.11, =0.1.0, =0.1.1 - bias-ext-approval 0.1.0 - bias-ext-discussions 0.1.0 - bias-ext-emoji 0.1.0 - bias-ext-flags 0.1.0 - bias-ext-likes 0.1.0 - bias-ext-mentions 0.1.0 - bias-ext-notifications 0.1.0 - bias-ext-post...