adeso (>=0.0.1, <=0.0.4), adze-modeler (0.0.1) +137 more potentially affected by CVE-2026-73295 via mkdocs-material (>=7.2.2, <=9.7.6)

mkdocs-material PYPI version =7.2.2, =0.0.1, =0.0.0, =0.10.0, =0.5.0a1, =0.3.1b1, =0.0.45, =1.6.4b1, =0.1.0, =0.0.34, =0.0.36 and more Source cves: CVE-2026-73295 Source advisory: OSV:PYSEC-2026-3864...

adeso (>=0.0.1, <=0.0.4), adze-modeler (0.0.1) +137 more potentially affected by CVE-2026-73295 via mkdocs-material (>=7.2.2, <=9.7.6)

mkdocs-material PYPI version =7.2.2, =0.0.1, =0.0.0, =0.10.0, =0.5.0a1, =0.3.1b1, =0.0.45, =1.6.4b1, =0.1.0, =0.0.34, =0.0.36 and more Source cves: CVE-2026-73295 Source advisory: GHSA-XVG9-69GF-FJRF...

adeso (>=0.0.1, <=0.0.4), adze-modeler (0.0.1) +137 more potentially affected by CVE-2026-73295 via mkdocs-material (>=7.2.2, <=9.7.6)

mkdocs-material PYPI version =7.2.2, =0.0.1, =0.0.0, =0.10.0, =0.5.0a1, =0.3.1b1, =0.0.45, =1.6.4b1, =0.1.0, =0.0.34, =0.0.36 and more Source cves: CVE-2026-73295 Source advisory: OSV:GHSA-XVG9-69GF-FJRF...

Cross-site Scripting (XSS)

Overview mkdocs-material is a security holding package Affected versions of this package are vulnerable to Cross-site Scripting XSS via the mountSearchSuggest function. An attacker can execute arbitrary JavaScript in the context of the documentation site's origin by crafting a malicious q URL...

Cross-site Scripting (XSS)

Overview mkdocs-material is a Documentation that simply works Affected versions of this package are vulnerable to Cross-site Scripting XSS via the mountSearchSuggest function. An attacker can execute arbitrary JavaScript in the context of the documentation site's origin by crafting a malicious q...

adeso (>=0.0.1, <=0.0.4), aiagents4pharma (>=0.0.0, <=1.49.1) +73 more potentially affected by CVE-2026-73295 via mkdocs-material (>=9.1.2, <=9.7.6)

mkdocs-material PYPI version =9.1.2, =0.0.1, =0.0.0, =0.10.0, =0.5.0a1, =0.1.0, =0.0.34, =0.7.0, =1.1.0, =2025.9.131446, =2025.9.191330 and more Source cves: CVE-2026-73295 Source advisory: SNYK:PYTHON-MKDOCSMATERIAL-18752056...

adeso (>=0.0.1, <=0.0.4), adze-modeler (0.0.1) +137 more potentially affected by CVE-2026-73295 via mkdocs-material (>=7.2.2, <=9.7.6)

mkdocs-material PYPI version =7.2.2, =0.0.1, =0.0.0, =0.10.0, =0.5.0a1, =0.3.1b1, =0.0.45, =1.6.4b1, =0.1.0, =0.0.34, =0.0.36 and more Source cves: CVE-2026-73295 Source advisory: MEND:CVE-2026-73295...

mkdocs-material (8.2.11), mkdocs-techdocs-bandicoot (>=1.1.7, <=1.1.9) +1 more potentially affected by CVE-2026-67422 via pymdown-extensions (9.3.0)

pymdown-extensions PYPI version 9.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-material 8.2.11 - mkdocs-techdocs-bandicoot =1.1.7, =1.0.2, =1.1.7 Source cves: CVE-2026-67422 Source advisory:...

docwriter (1.2.0), liara (>=2.0.0a1, <=2.0.0a6) +1 more potentially affected by CVE-2026-67422 via pymdown-extensions (6.2.1)

pymdown-extensions PYPI version 6.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - docwriter 1.2.0 - liara =2.0.0a1, =4.5.0, =4.6.0 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

mkdocs-material (8.2.11), mkdocs-techdocs-bandicoot (>=1.1.7, <=1.1.9) +1 more potentially affected by CVE-2026-67422 via pymdown-extensions (9.3.0)

pymdown-extensions PYPI version 9.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-material 8.2.11 - mkdocs-techdocs-bandicoot =1.1.7, =1.0.2, =1.1.7 Source cves: CVE-2026-67422 Source advisory:...

docwriter (1.2.0), liara (>=2.0.0a1, <=2.0.0a6) +1 more potentially affected by CVE-2026-67422 via pymdown-extensions (6.2.1)

pymdown-extensions PYPI version 6.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - docwriter 1.2.0 - liara =2.0.0a1, =4.5.0, =4.6.0 Source cves: CVE-2026-67422 Source advisory: OSV:GHSA-GM37-52C6-37MW...

docwriter (1.2.0), liara (>=2.0.0a1, <=2.0.0a6) +1 more potentially affected by CVE-2026-61632 via pymdown-extensions (6.2.1)

pymdown-extensions PYPI version 6.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - docwriter 1.2.0 - liara =2.0.0a1, =4.5.0, =4.6.0 Source cves: CVE-2026-61632 Source advisory: OSV:PYSEC-2026-3609...

mkdocs-material (8.2.11), mkdocs-techdocs-bandicoot (>=1.1.7, <=1.1.9) +1 more potentially affected by CVE-2026-61632 via pymdown-extensions (9.3.0)

pymdown-extensions PYPI version 9.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-material 8.2.11 - mkdocs-techdocs-bandicoot =1.1.7, =1.0.2, =1.1.7 Source cves: CVE-2026-61632 Source advisory:...

FreeBSD : py-mkdocs-material -- DOM XSS vulnerability (1976b049-8ccc-11f1-b333-901b0edee044)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 1976b049-8ccc-11f1-b333-901b0edee044 advisory. Martin Donath reports: Material for MkDocs 7.2.0 through 9.7.6 contains a DOM-based cross-site scriptin...

mkdocs-material (8.2.11), mkdocs-techdocs-bandicoot (>=1.1.7, <=1.1.9) +1 more potentially affected by CVE-2026-61632 via pymdown-extensions (9.3.0)

pymdown-extensions PYPI version 9.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-material 8.2.11 - mkdocs-techdocs-bandicoot =1.1.7, =1.0.2, =1.1.7 Source cves: CVE-2026-61632 Source advisory:...

docwriter (1.2.0), liara (>=2.0.0a1, <=2.0.0a6) +1 more potentially affected by CVE-2026-61632 via pymdown-extensions (6.2.1)

pymdown-extensions PYPI version 6.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - docwriter 1.2.0 - liara =2.0.0a1, =4.5.0, =4.6.0 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JCX2...

py-mkdocs-material -- DOM XSS vulnerability

Martin Donath reports: Material for MkDocs 7.2.0 through 9.7.6 contains a DOM-based cross-site scripting vulnerability in the optional search.suggest feature. A crafted q URL parameter could execute JavaScript in the documentation site's origin after user interaction...

mkdocs-material (8.2.11), mkdocs-techdocs-bandicoot (>=1.1.7, <=1.1.9) +1 more potentially affected by CVE-2025-68142 via pymdown-extensions (9.3.0)

pymdown-extensions PYPI version 9.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-material 8.2.11 - mkdocs-techdocs-bandicoot =1.1.7, =1.0.2, =1.1.7 Source cves: CVE-2025-68142 Source advisory:...

docwriter (1.2.0), liara (>=2.0.0a1, <=2.0.0a6) +1 more potentially affected by CVE-2025-68142 via pymdown-extensions (6.2.1)

pymdown-extensions PYPI version 6.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - docwriter 1.2.0 - liara =2.0.0a1, =4.5.0, =4.6.0 Source cves: CVE-2025-68142 Source advisory: OSV:PYSEC-2026-1825...

mkdocs-material (8.2.11), mkdocs-techdocs-bandicoot (>=1.1.7, <=1.1.9) +1 more potentially affected by CVE-2025-68142 via pymdown-extensions (9.3.0)

pymdown-extensions PYPI version 9.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-material 8.2.11 - mkdocs-techdocs-bandicoot =1.1.7, =1.0.2, =1.1.7 Source cves: CVE-2025-68142 Source advisory:...