adze-modeler (0.0.1), arkindex-base-worker (>=0.3.3rc1, <=0.3.3rc3) +27 more potentially affected by CVE-2025-68142 via pymdown-extensions (9.11.0)

pymdown-extensions PYPI version 9.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - adze-modeler 0.0.1 - arkindex-base-worker =0.3.3rc1, =0.2.0, =1.1.3, =0.3.3, =0.1.1, =0.2.4, =2.3.3, =0.4.0, =0.5.0, =0.6.1...

blog-vi (0.2.6), django-apirouter (>=0.1.0, <=0.2.1) +5 more potentially affected by CVE-2025-68142 via pymdown-extensions (7.1.0)

pymdown-extensions PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - blog-vi 0.2.6 - django-apirouter =0.1.0, =2.1.0, =0.0.4, =0.10.2, =1.4.0, =1.7.0 Source cves: CVE-2025-68142 Source advisory...

docwriter (1.2.0), liara (>=2.0.0a1, <=2.0.0a6) +1 more potentially affected by CVE-2025-68142 via pymdown-extensions (6.2.1)

pymdown-extensions PYPI version 6.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - docwriter 1.2.0 - liara =2.0.0a1, =4.5.0, =4.6.0 Source cves: CVE-2025-68142 Source advisory: OSV:PYSEC-2026-1825...

PyMdown Extensions has a ReDOS bug in its Figure Capture extension

ImpactThis issue describes a ReDOS bug found within the figure caption extension pymdownx.blocks.caption .In systems that take unchecked user content, this could cause long hangs when processing the data if a malicious payload was crafted. PatchesThis issue is patched in Release 10.16.1...

docwriter (>=0.1.0, <=0.3.1) potentially affected by CVE-2025-68142 via pymdown-extensions (4.11.0)

pymdown-extensions PYPI version 4.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - docwriter =0.1.0, =0.3.1 Source cves: CVE-2025-68142 Source advisory: OSV:PYSEC-2026-1825...

PYSEC-2026-1825 PyMdown Extensions has a ReDOS bug in its Figure Capture extension

Impact This issue describes a ReDOS bug found within the figure caption extension pymdownx.blocks.caption . In systems that take unchecked user content, this could cause long hangs when processing the data if a malicious payload was crafted. Patches This issue is patched in Release 10.16.1...

liara (>=2.0.0a7, <=2.0.7), mkdocs-kpn (>=0.15.0, <=0.18.3) +4 more potentially affected by CVE-2025-68142 via pymdown-extensions (6.3.0)

pymdown-extensions PYPI version 6.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - liara =2.0.0a7, =0.15.0, =0.0.5, =4.0.0, =7.0.4 - thea 0.0.1 Source cves: CVE-2025-68142 Source advisory: OSV:PYSEC-2026-182...

asn-nmap (0.1.9), iga (>=0.0.1, <=1.0.3) potentially affected by CVE-2025-68142 via pymdown-extensions (9.10.0)

pymdown-extensions PYPI version 9.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - asn-nmap 0.1.9 - iga =0.0.1, =1.0.3 Source cves: CVE-2025-68142 Source advisory: OSV:PYSEC-2026-1825...

arctic-ai (0.1.0), arkindex-base-worker (>=0.3.2rc5, <=0.3.2) potentially affected by CVE-2025-68142 via pymdown-extensions (9.9.2)

pymdown-extensions PYPI version 9.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arctic-ai 0.1.0 - arkindex-base-worker =0.3.2rc5, =0.3.2 Source cves: CVE-2025-68142 Source advisory: OSV:PYSEC-2026-1825...

freckles (>=0.9.1, <=1.0.0), freckles-adapter-nsbl (>=0.9.0, <=1.0.0) +3 more potentially affected by CVE-2025-68142 via pymdown-extensions (6.0.0)

pymdown-extensions PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - freckles =0.9.1, =0.9.0, =0.9.0, =0.9.0, =1.0.0 Source cves: CVE-2025-68142 Source advisory: OSV:PYSEC-2026-1825...

adze-modeler (0.0.1), arctic-ai (0.1.0) +59 more potentially affected by CVE-2023-32309 via pymdown-extensions (>=4.11.0, <=9.11.0)

pymdown-extensions PYPI version =4.11.0, =0.3.1b1, =0.2.0, =1.1.3, =0.1.0, =0.1.0, =0.1.0, =0.9.1, =0.9.0, =0.9.0, =0.3.3, =0.3.4.1 and more Source cves: CVE-2023-32309 Source advisory: OSV:PYSEC-2026-1824...

Directory Traversal

Overview pymdown-extensions is an Extension pack for Python Markdown. Affected versions of this package are vulnerable to Directory Traversal in the getsnippetpath function. An attacker can access arbitrary files outside the intended directory by crafting a path that exploits improper directory...

adeso (>=0.0.1, <=0.0.4), anoteai (>=0.10.0, <=0.20.0) +80 more potentially affected by CVE-2023-32309 +1 more via pymdown-extensions (>=10.0.1, <=10.21.2)

pymdown-extensions PYPI version =10.0.1, =0.0.1, =0.10.0, =0.3.3rc4, =3.1.0, =0.0.86, =0.0.11, =0.1.0, =0.1.1 - bias-ext-approval 0.1.0 - bias-ext-discussions 0.1.0 - bias-ext-emoji 0.1.0 - bias-ext-flags 0.1.0 - bias-ext-likes 0.1.0 - bias-ext-mentions 0.1.0 and more Source cves: CVE-2023-32309,...

adeso (>=0.0.1, <=0.0.4), anoteai (>=0.10.0, <=0.20.0) +80 more potentially affected by CVE-2023-32309 +1 more via pymdown-extensions (>=10.0.1, <=10.21.2)

pymdown-extensions PYPI version =10.0.1, =0.0.1, =0.10.0, =0.3.3rc4, =3.1.0, =0.0.86, =0.0.11, =0.1.0, =0.1.1 - bias-ext-approval 0.1.0 - bias-ext-discussions 0.1.0 - bias-ext-emoji 0.1.0 - bias-ext-flags 0.1.0 - bias-ext-likes 0.1.0 - bias-ext-mentions 0.1.0 and more Source cves: CVE-2023-32309,...

adeso (>=0.0.1, <=0.0.4), anoteai (>=0.10.0, <=0.20.0) +80 more potentially affected by CVE-2026-46338 via pymdown-extensions (>=10.0.1, <=10.21.2)

pymdown-extensions PYPI version =10.0.1, =0.0.1, =0.10.0, =0.3.3rc4, =3.1.0, =0.0.86, =0.0.11, =0.1.0, =0.1.1 - bias-ext-approval 0.1.0 - bias-ext-discussions 0.1.0 - bias-ext-emoji 0.1.0 - bias-ext-flags 0.1.0 - bias-ext-likes 0.1.0 - bias-ext-mentions 0.1.0 and more Source cves: CVE-2026-46338...

Python Markdown Library Extension DoS

The vulnerability of the pymdown-extensions extension for the Python Markdown library is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

ROS-20260310-73-0021

Vulnerability in python-pymdown-extensions related to the use of regular expression with inefficient computational complexity. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

Regular Expression Denial Of Service (ReDoS)

PyMdown Extensions is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to inefficient regular expression processing in the pymdownx.blocks.caption extension, which allows an attacker to supply crafted input that triggers excessive processing time and causes the...

SUSE CVE-2025-68142

PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. Versions prior to 10.16.1 have a ReDOS bug found within the figure caption extension pymdownx.blocks.caption. In systems that take unchecked user content, this could cause long hanges when processing the data if a...

CVE-2025-68142

A flaw was found in PyMdown Extensions. This vulnerability allows a Regular Expression Denial of Service ReDOS via a crafted malicious payload in unchecked user content processed by the figure caption extension pymdownx.blocks.caption. Mitigation To mitigate this issue, avoid using the...