CVE-2026-61632 PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path

PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. In versions up to and including 10.21.3, the b64 extension is vulnerable to a path traversal that discloses arbitrary files: it inlines images referenced by by joining the src onto the configured basepath with...

CVE-2026-61632

PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. In versions up to and including 10.21.3, the b64 extension is vulnerable to a path traversal that discloses arbitrary files: it inlines images referenced by by joining the src onto the configured basepath with...

CVE-2026-61632 PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path

PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. In versions up to and including 10.21.3, the b64 extension is vulnerable to a path traversal that discloses arbitrary files: it inlines images referenced by by joining the src onto the configured basepath with...

EUVD-2026-54149

PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. In versions up to and including 10.21.3, the b64 extension is vulnerable to a path traversal that discloses arbitrary files: it inlines images referenced by by joining the src onto the configured basepath with...

CVE-2026-61632

PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. In versions up to and including 10.21.3, the b64 extension is vulnerable to a path traversal that discloses arbitrary files: it inlines images referenced by by joining the src onto the configured basepath with...

adeso (>=0.0.1, <=0.0.4), adze-modeler (0.0.1) +251 more potentially affected by CVE-2026-67422 via pymdown-extensions (>=4.11.0, <=11.0.0)

pymdown-extensions PYPI version =4.11.0, =0.0.1, =0.0.0, =0.1.0, =0.10.0, =0.5.0a1, =0.1.0, =0.3.1b1, =0.3.7 - asn-nmap 0.1.9 and more Source cves: CVE-2026-67422 Source advisory: MEND:CVE-2026-67422...

CVE-2026-67422 pymdown-extensions: Exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors

pymdown-extensions is a collection of extensions for the Python Markdown library. In versions up to and including 11.0, four inline processors caret, tilde, betterem, and magiclink use regular expressions whose content groups can partition a run of delimiter characters in exponentially many ways,...

CVE-2026-67422

pymdown-extensions is a collection of extensions for the Python Markdown library. In versions up to and including 11.0, four inline processors caret, tilde, betterem, and magiclink use regular expressions whose content groups can partition a run of delimiter characters in exponentially many ways,...

CVE-2026-67422 pymdown-extensions: Exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors

pymdown-extensions is a collection of extensions for the Python Markdown library. In versions up to and including 11.0, four inline processors caret, tilde, betterem, and magiclink use regular expressions whose content groups can partition a run of delimiter characters in exponentially many ways,...

CVE-2026-67422

pymdown-extensions is a collection of extensions for the Python Markdown library. In versions up to and including 11.0, four inline processors caret, tilde, betterem, and magiclink use regular expressions whose content groups can partition a run of delimiter characters in exponentially many ways,...

CVE-2026-67422

CVE-2026-67422 affects pymdown-extensions up to version 11.0, where four inline processors—caret, tilde, betterem, and magiclink—use regex patterns whose groups can partition delimiter runs in exponentially many ways. This causes catastrophic backtracking and unbounded CPU usage when rendering a ...

CVE-2026-67422 pymdown-extensions: Exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors

pymdown-extensions is a collection of extensions for the Python Markdown library. In versions up to and including 11.0, four inline processors caret, tilde, betterem, and magiclink use regular expressions whose content groups can partition a run of delimiter characters in exponentially many ways,...

CVE-2026-67422

pymdown-extensions is a collection of extensions for the Python Markdown library. In versions up to and including 11.0, four inline processors caret, tilde, betterem, and magiclink use regular expressions whose content groups can partition a run of delimiter characters in exponentially many ways,...

CVE-2026-67422: Inefficient Regular Expression Complexity

pymdown-extensions is a collection of extensions for the Python Markdown library. In versions up to and including 11.0, four inline processors caret, tilde, betterem, and magiclink use regular expressions whose content groups can partition a run of delimiter characters in exponentially many ways,...

PT-2026-68773

Name of the Vulnerable Software and Affected Versions pymdown-extensions versions prior to 11.0.1 Description Four inline processors caret, tilde, betterem, and magiclink use regular expressions that can cause catastrophic backtracking—a condition where the regex engine takes an exponential amoun...

CVE-2026-61632: Improper Limitation of a Pathname to a Restricted Directory

PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. In versions up to and including 10.21.3, the b64 extension is vulnerable to a path traversal that discloses arbitrary files: it inlines images referenced by by joining the src onto the configured basepath with...

labext-pkg (2.1.3) potentially affected by CVE-2026-61632 via pymdown-extensions (9.4.0)

pymdown-extensions PYPI version 9.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - labext-pkg 2.1.3 Source cves: CVE-2026-61632 Source advisory: OSV:PYSEC-2026-3609...

open-webui (>=0.8.0, <=0.8.8) potentially affected by CVE-2026-61632 via pymdown-extensions (10.20.1)

pymdown-extensions PYPI version 10.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - open-webui =0.8.0, =0.8.8 Source cves: CVE-2026-61632 Source advisory: OSV:PYSEC-2026-3609...

edubotics-core (>=0.1.3, <=0.1.7), lexical-workspace (>=0.1.0, <=0.2.0) +5 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.9.0)

pymdown-extensions PYPI version 10.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - edubotics-core =0.1.3, =0.1.0, =12.0.27, =1.0.0, =1.0.0, =1.2.4 Source cves: CVE-2026-61632 Source advisory:...

lpw (>=0.2.0, <=0.2.4.2) potentially affected by CVE-2026-61632 via pymdown-extensions (10.11.1)

pymdown-extensions PYPI version 10.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - lpw =0.2.0, =0.2.4.2 Source cves: CVE-2026-61632 Source advisory: OSV:PYSEC-2026-3609...