freckles (>=0.9.1, <=1.0.0), freckles-adapter-nsbl (>=0.9.0, <=1.0.0) +3 more potentially affected by CVE-2026-67422 via pymdown-extensions (6.0.0)

pymdown-extensions PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - freckles =0.9.1, =0.9.0, =0.9.0, =0.9.0, =1.0.0 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

arkindex-base-worker (>=0.3.5rc6, <=0.3.6rc5), mkdocs-techdocs-core (>=1.3.2, <=1.5.0) +1 more potentially affected by CVE-2026-67422 via pymdown-extensions (10.3.1)

pymdown-extensions PYPI version 10.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.5rc6, =1.3.2, =1.5.0 - mkdocs-techdocs-core-alexef 1.4.0 Source cves: CVE-2026-67422 Source...

docwriter (1.2.0), liara (>=2.0.0a1, <=2.0.0a6) +1 more potentially affected by CVE-2026-67422 via pymdown-extensions (6.2.1)

pymdown-extensions PYPI version 6.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - docwriter 1.2.0 - liara =2.0.0a1, =4.5.0, =4.6.0 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

arctic-ai (0.1.0), arkindex-base-worker (>=0.3.2rc5, <=0.3.2) potentially affected by CVE-2026-67422 via pymdown-extensions (9.9.2)

pymdown-extensions PYPI version 9.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arctic-ai 0.1.0 - arkindex-base-worker =0.3.2rc5, =0.3.2 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

labext-pkg (2.1.1), mkdocs-techdocs-core (>=0.2.3, <=1.0.1) potentially affected by CVE-2026-67422 via pymdown-extensions (9.0.0)

pymdown-extensions PYPI version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - labext-pkg 2.1.1 - mkdocs-techdocs-core =0.2.3, =1.0.1 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

mkdocs-techdocs-core (>=0.0.6, <=0.0.7) potentially affected by CVE-2026-67422 via pymdown-extensions (8.0.0)

pymdown-extensions PYPI version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-techdocs-core =0.0.6, =0.0.7 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

iga (1.3.0), labext-pkg (2.3.1) +2 more potentially affected by CVE-2026-67422 via pymdown-extensions (10.8.1)

pymdown-extensions PYPI version 10.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - iga 1.3.0 - labext-pkg 2.3.1 - markdown-live-preview =0.2.67, =12.0.25, =12.0.26 Source cves: CVE-2026-67422 Source advisor...

booklab (>=0.7.0, <=0.10.0a68) potentially affected by CVE-2026-67422 via pymdown-extensions (10.1.0)

pymdown-extensions PYPI version 10.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - booklab =0.7.0, =0.10.0a68 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

PYSEC-2026-3654 pymdown-extensions: exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors

Summary Four inline processors in pymdown-extensions contain regular expressions with exponential backtracking. A single untrusted Markdown line under 50 bytes drives markdown.markdown into unbounded CPU on the rendering thread seconds at 45 bytes, growing exponentially with each added character...

aiagents4pharma (>=0.0.0, <=1.49.1), aiagents4pharma-ansh (0.0.0) +127 more potentially affected by CVE-2026-67422 via pymdown-extensions (10.21.3)

pymdown-extensions PYPI version 10.21.3 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - aiagents4pharma =0.0.0, =0.1.0, =0.5.0a1, =0.1.0, =3.8.0, =0.1.0, =2025.9.131446, =0.2.0b1, =1.0.4, =0.1.0, =0.2.1 and mor...

mkdocs-techdocs-core (1.2.0) potentially affected by CVE-2026-67422 via pymdown-extensions (9.9.1)

pymdown-extensions PYPI version 9.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-techdocs-core 1.2.0 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

mkdocs-techdocs-core (1.5.2) potentially affected by CVE-2026-67422 via pymdown-extensions (10.13.0)

pymdown-extensions PYPI version 10.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-techdocs-core 1.5.2 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

pandas-checks (2.0.2) potentially affected by CVE-2026-67422 via pymdown-extensions (11.0.0)

pymdown-extensions PYPI version 11.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - pandas-checks 2.0.2 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

arkindex-base-worker (>=0.3.1rc3, <=0.3.1rc4) potentially affected by CVE-2026-67422 via pymdown-extensions (9.6.0)

pymdown-extensions PYPI version 9.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.1rc3, =0.3.1rc4 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

CVE-2026-67422

creationtimestamp| type| source ---|---|--- 2026-08-07 21:05:02+00:00| published-proof-of-concept| https://github.com/facelessuser/pymdown-extensions/security/advisories/GHSA-gm37-52c6-37mw 2026-08-08 02:32:35+00:00| seen| https://gist.github.com/alon710/6f3e0768fc0386f4c965af62333fef78 2026-08-1...

brigid (>=0.14.0, <=0.16.1), mkdocs-techdocs-core (1.6.0) +1 more potentially affected by CVE-2026-67422 via pymdown-extensions (10.16.1)

pymdown-extensions PYPI version 10.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - brigid =0.14.0, =1.2.5, =1.2.7 Source cves: CVE-2026-67422 Source advisory: OSV:GHSA-GM37-52C6-37MW...

arkindex-base-worker (>=0.3.6, <=0.3.7rc1), markdown-live-preview (>=0.2.48, <=0.2.53) +1 more potentially affected by CVE-2026-67422 via pymdown-extensions (10.5.0)

pymdown-extensions PYPI version 10.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.6, =0.2.48, =0.11.0, =0.12.2 Source cves: CVE-2026-67422 Source advisory: OSV:GHSA-GM37-52C6-37MW...

labext-pkg (2.1.1), mkdocs-techdocs-core (>=0.2.3, <=1.0.1) potentially affected by CVE-2026-67422 via pymdown-extensions (9.0.0)

pymdown-extensions PYPI version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - labext-pkg 2.1.1 - mkdocs-techdocs-core =0.2.3, =1.0.1 Source cves: CVE-2026-67422 Source advisory: OSV:GHSA-GM37-52C6-37MW...

arkindex-base-worker (>=0.3.1rc5, <=0.3.1) potentially affected by CVE-2026-67422 via pymdown-extensions (9.7.0)

pymdown-extensions PYPI version 9.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.1rc5, =0.3.1 Source cves: CVE-2026-67422 Source advisory: OSV:GHSA-GM37-52C6-37MW...

aurapro-ui (>=3.1.0, <=3.7.4), leopath (>=0.1.3, <=0.2.1) +2 more potentially affected by CVE-2026-67422 via pymdown-extensions (10.21.0)

pymdown-extensions PYPI version 10.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - aurapro-ui =3.1.0, =0.1.3, =0.4.3, =0.8.11, =0.9.6 Source cves: CVE-2026-67422 Source advisory: OSV:GHSA-GM37-52C6-37MW...