liara (>=2.0.0a7, <=2.0.7), mkdocs-kpn (>=0.15.0, <=0.18.3) +4 more potentially affected by CVE-2026-67422 via pymdown-extensions (6.3.0)

pymdown-extensions PYPI version 6.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - liara =2.0.0a7, =0.15.0, =0.0.5, =4.0.0, =7.0.4 - thea 0.0.1 Source cves: CVE-2026-67422 Source advisory:...

mybws (0.1.1) potentially affected by CVE-2026-67422 via pymdown-extensions (10.8.0)

pymdown-extensions PYPI version 10.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mybws 0.1.1 Source cves: CVE-2026-67422 Source advisory: OSV:GHSA-GM37-52C6-37MW...

booklab (>=0.7.0, <=0.10.0a68) potentially affected by CVE-2026-67422 via pymdown-extensions (10.1.0)

pymdown-extensions PYPI version 10.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - booklab =0.7.0, =0.10.0a68 Source cves: CVE-2026-67422 Source advisory: OSV:GHSA-GM37-52C6-37MW...

arguebuf (2.0.0b12), arkindex-base-worker (0.3.7) +26 more potentially affected by CVE-2026-67422 via pymdown-extensions (10.7.1)

pymdown-extensions PYPI version 10.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arguebuf 2.0.0b12 - arkindex-base-worker 0.3.7 - balcony =0.0.86, =0.0.11, =0.1.0, =0.1.1 - bias-ext-approval 0.1.0 -...

labext-pkg (2.1.2), stuffpages (0.7.3) potentially affected by CVE-2026-67422 via pymdown-extensions (9.1.0)

pymdown-extensions PYPI version 9.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - labext-pkg 2.1.2 - stuffpages 0.7.3 Source cves: CVE-2026-67422 Source advisory: OSV:GHSA-GM37-52C6-37MW...

arkindex-base-worker (>=0.3.5rc6, <=0.3.6rc5), mkdocs-techdocs-core (>=1.3.2, <=1.5.0) +1 more potentially affected by CVE-2026-67422 via pymdown-extensions (10.3.1)

pymdown-extensions PYPI version 10.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.5rc6, =1.3.2, =1.5.0 - mkdocs-techdocs-core-alexef 1.4.0 Source cves: CVE-2026-67422 Source...

arkindex-base-worker (>=0.3.7rc2, <=0.3.7rc10), mafiagg (>=1.0.0, <=1.0.4) +1 more potentially affected by CVE-2026-67422 via pymdown-extensions (10.7.0)

pymdown-extensions PYPI version 10.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.7rc2, =1.0.0, =0.2.54, =0.2.65 Source cves: CVE-2026-67422 Source advisory: OSV:GHSA-GM37-52C6-37...

aiagents4pharma (>=0.0.0, <=1.49.1), aiagents4pharma-ansh (0.0.0) +127 more potentially affected by CVE-2026-67422 via pymdown-extensions (10.21.3)

pymdown-extensions PYPI version 10.21.3 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - aiagents4pharma =0.0.0, =0.1.0, =0.5.0a1, =0.1.0, =3.8.0, =0.1.0, =2025.9.131446, =0.2.0b1, =1.0.4, =0.1.0, =0.2.1 and mor...

anoteai (>=0.10.0, <=0.20.0), buisciii-tools (>=2.2.2, <=2.2.5) +23 more potentially affected by CVE-2026-67422 via pymdown-extensions (10.4.0)

pymdown-extensions PYPI version 10.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - anoteai =0.10.0, =2.2.2, =0.1.0, =4.21.4, =1.0.6, =0.17.0, =2.7.7, =6.2.0, =0.2.0, =0.2.0, =0.2.2 and more Source cves:...

localchatgpt (>=0.0.1, <=0.0.2) potentially affected by CVE-2026-67422 via pymdown-extensions (10.11.2)

pymdown-extensions PYPI version 10.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - localchatgpt =0.0.1, =0.0.2 Source cves: CVE-2026-67422 Source advisory: OSV:GHSA-GM37-52C6-37MW...

arkindex-base-worker (>=0.3.4rc1, <=0.3.4), mkdocs-techdocs-core (>=1.3.0, <=1.3.1) potentially affected by CVE-2026-67422 via pymdown-extensions (10.2.0)

pymdown-extensions PYPI version 10.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.4rc1, =1.3.0, =1.3.1 Source cves: CVE-2026-67422 Source advisory: OSV:GHSA-GM37-52C6-37MW...

lpw (>=0.2.0, <=0.2.4.2) potentially affected by CVE-2026-67422 via pymdown-extensions (10.11.1)

pymdown-extensions PYPI version 10.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - lpw =0.2.0, =0.2.4.2 Source cves: CVE-2026-67422 Source advisory: OSV:GHSA-GM37-52C6-37MW...

mkdocs-meta-descriptions-plugin (>=0.0.3, <=0.0.4) potentially affected by CVE-2026-67422 via pymdown-extensions (8.1.1)

pymdown-extensions PYPI version 8.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-meta-descriptions-plugin =0.0.3, =0.0.4 Source cves: CVE-2026-67422 Source advisory: OSV:GHSA-GM37-52C6-37MW...

adze-modeler (0.0.1), arkindex-base-worker (>=0.3.3rc1, <=0.3.3rc3) +27 more potentially affected by CVE-2026-67422 via pymdown-extensions (9.11.0)

pymdown-extensions PYPI version 9.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - adze-modeler 0.0.1 - arkindex-base-worker =0.3.3rc1, =0.2.0, =1.1.3, =0.3.3, =0.1.1, =0.2.4, =2.3.3, =0.4.0, =0.5.0, =0.6.1...

docwriter (1.2.0), liara (>=2.0.0a1, <=2.0.0a6) +1 more potentially affected by CVE-2026-67422 via pymdown-extensions (6.2.1)

pymdown-extensions PYPI version 6.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - docwriter 1.2.0 - liara =2.0.0a1, =4.5.0, =4.6.0 Source cves: CVE-2026-67422 Source advisory: OSV:GHSA-GM37-52C6-37MW...

pandas-checks (2.0.2) potentially affected by CVE-2026-67422 via pymdown-extensions (11.0.0)

pymdown-extensions PYPI version 11.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - pandas-checks 2.0.2 Source cves: CVE-2026-67422 Source advisory: OSV:GHSA-GM37-52C6-37MW...

arkindex-base-worker (>=0.3.5rc1, <=0.3.5rc5), saasops (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-67422 via pymdown-extensions (10.3.0)

pymdown-extensions PYPI version 10.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.5rc1, =0.1.0, =0.1.1 Source cves: CVE-2026-67422 Source advisory: OSV:GHSA-GM37-52C6-37MW...

dike (>=0.1.0, <=0.4.0), liara (>=2.1.0, <=2.3.2) +9 more potentially affected by CVE-2026-67422 via pymdown-extensions (8.2.0)

pymdown-extensions PYPI version 8.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - dike =0.1.0, =2.1.0, =0.1.0, =0.19.1, =0.13.0, =0.3.0, =2.2.0, =0.1.0, =0.1.6 Source cves: CVE-2026-67422 Source advisory:...

open-webui (>=0.8.0, <=0.8.8) potentially affected by CVE-2026-67422 via pymdown-extensions (10.20.1)

pymdown-extensions PYPI version 10.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - open-webui =0.8.0, =0.8.8 Source cves: CVE-2026-67422 Source advisory: OSV:GHSA-GM37-52C6-37MW...

pymdown-extensions: exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors

Summary Four inline processors in pymdown-extensions contain regular expressions with exponential backtracking. A single untrusted Markdown line under 50 bytes drives markdown.markdown into unbounded CPU on the rendering thread seconds at 45 bytes, growing exponentially with each added character...