OESA-2026-4183 python-pymdown-extensions security update

Extension pack for Python Markdown. Security Fixes: PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. From 10.0.1 until 10.21.3, pymdownx.snippets uses a string-prefix containment check in SnippetPreprocessor.getsnippetpath in pymdownx/snippets.py when...

OESA-2026-4184 python-pymdown-extensions security update

Extension pack for Python Markdown. Security Fixes: PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. From 10.0.1 until 10.21.3, pymdownx.snippets uses a string-prefix containment check in SnippetPreprocessor.getsnippetpath in pymdownx/snippets.py when...

OESA-2026-4182 python-pymdown-extensions security update

Extension pack for Python Markdown. Security Fixes: PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. From 10.0.1 until 10.21.3, pymdownx.snippets uses a string-prefix containment check in SnippetPreprocessor.getsnippetpath in pymdownx/snippets.py when...

ROOT-APP-PYPI-CVE-2026-46338 CVE-2026-46338 in pymdown-extensions - Patched by Root

Root has patched CVE-2026-46338 in the pymdown-extensions package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-67422 CVE-2026-67422 in pymdown-extensions - Patched by Root

Root has patched CVE-2026-67422 in the pymdown-extensions package for Root:PyPI. Multiple fixed versions available...

anoteai (>=0.10.0, <=0.20.0), buisciii-tools (>=2.2.2, <=2.2.5) +23 more potentially affected by CVE-2026-67422 via pymdown-extensions (10.4.0)

pymdown-extensions PYPI version 10.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - anoteai =0.10.0, =2.2.2, =0.1.0, =4.21.4, =1.0.6, =0.17.0, =2.7.7, =6.2.0, =0.2.0, =0.2.0, =0.2.2 and more Source cves:...

liara (>=2.0.0a7, <=2.0.7), mkdocs-kpn (>=0.15.0, <=0.18.3) +4 more potentially affected by CVE-2026-67422 via pymdown-extensions (6.3.0)

pymdown-extensions PYPI version 6.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - liara =2.0.0a7, =0.15.0, =0.0.5, =4.0.0, =7.0.4 - thea 0.0.1 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-365...

lpw (>=0.2.0, <=0.2.4.2) potentially affected by CVE-2026-67422 via pymdown-extensions (10.11.1)

pymdown-extensions PYPI version 10.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - lpw =0.2.0, =0.2.4.2 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

brigid (>=0.14.0, <=0.16.1), mkdocs-techdocs-core (1.6.0) +1 more potentially affected by CVE-2026-67422 via pymdown-extensions (10.16.1)

pymdown-extensions PYPI version 10.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - brigid =0.14.0, =1.2.5, =1.2.7 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

arkindex-base-worker (>=0.3.7rc2, <=0.3.7rc10), mafiagg (>=1.0.0, <=1.0.4) +1 more potentially affected by CVE-2026-67422 via pymdown-extensions (10.7.0)

pymdown-extensions PYPI version 10.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.7rc2, =1.0.0, =0.2.54, =0.2.65 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

arkindex-base-worker (>=0.3.6, <=0.3.7rc1), markdown-live-preview (>=0.2.48, <=0.2.53) +1 more potentially affected by CVE-2026-67422 via pymdown-extensions (10.5.0)

pymdown-extensions PYPI version 10.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.6, =0.2.48, =0.11.0, =0.12.2 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

edubotics-core (>=0.1.3, <=0.1.7), lexical-workspace (>=0.1.0, <=0.2.0) +5 more potentially affected by CVE-2026-67422 via pymdown-extensions (10.9.0)

pymdown-extensions PYPI version 10.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - edubotics-core =0.1.3, =0.1.0, =12.0.27, =1.0.0, =1.0.0, =1.2.4 Source cves: CVE-2026-67422 Source advisory:...

open-webui (>=0.8.0, <=0.8.8) potentially affected by CVE-2026-67422 via pymdown-extensions (10.20.1)

pymdown-extensions PYPI version 10.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - open-webui =0.8.0, =0.8.8 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

mkdocs-material (8.2.11), mkdocs-techdocs-bandicoot (>=1.1.7, <=1.1.9) +1 more potentially affected by CVE-2026-67422 via pymdown-extensions (9.3.0)

pymdown-extensions PYPI version 9.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-material 8.2.11 - mkdocs-techdocs-bandicoot =1.1.7, =1.0.2, =1.1.7 Source cves: CVE-2026-67422 Source advisory:...

docwriter (>=0.1.0, <=0.3.1) potentially affected by CVE-2026-67422 via pymdown-extensions (4.11.0)

pymdown-extensions PYPI version 4.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - docwriter =0.1.0, =0.3.1 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

mkdocs-note (0.0.1), mkdocs-zettelkasten (>=0.4.0, <=0.4.2) +1 more potentially affected by CVE-2026-67422 via pymdown-extensions (10.15.0)

pymdown-extensions PYPI version 10.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-note 0.0.1 - mkdocs-zettelkasten =0.4.0, =0.0.1, =0.0.7 Source cves: CVE-2026-67422 Source advisory:...

open-webui (>=0.7.0, <=0.7.2) potentially affected by CVE-2026-67422 via pymdown-extensions (10.20.0)

pymdown-extensions PYPI version 10.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - open-webui =0.7.0, =0.7.2 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

arkindex-base-worker (>=0.3.2rc1, <=0.3.2rc3), rooster-client (0.0.1) potentially affected by CVE-2026-67422 via pymdown-extensions (9.9.0)

pymdown-extensions PYPI version 9.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.2rc1, =0.3.2rc3 - rooster-client 0.0.1 Source cves: CVE-2026-67422 Source advisory:...

mkdocs-meta-descriptions-plugin (>=0.0.3, <=0.0.4) potentially affected by CVE-2026-67422 via pymdown-extensions (8.1.1)

pymdown-extensions PYPI version 8.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-meta-descriptions-plugin =0.0.3, =0.0.4 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

adze-modeler (0.0.1), arkindex-base-worker (>=0.3.3rc1, <=0.3.3rc3) +27 more potentially affected by CVE-2026-67422 via pymdown-extensions (9.11.0)

pymdown-extensions PYPI version 9.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - adze-modeler 0.0.1 - arkindex-base-worker =0.3.3rc1, =0.2.0, =1.1.3, =0.3.3, =0.1.1, =0.2.4, =2.3.3, =0.4.0, =0.5.0, =0.6.1...