arkindex-base-worker (>=0.3.4rc1, <=0.3.4), mkdocs-techdocs-core (>=1.3.0, <=1.3.1) potentially affected by CVE-2026-67422 via pymdown-extensions (10.2.0)

pymdown-extensions PYPI version 10.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.4rc1, =1.3.0, =1.3.1 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

asn-nmap (0.1.9), iga (>=0.0.1, <=1.0.3) potentially affected by CVE-2026-67422 via pymdown-extensions (9.10.0)

pymdown-extensions PYPI version 9.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - asn-nmap 0.1.9 - iga =0.0.1, =1.0.3 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

dike (>=0.1.0, <=0.4.0), liara (>=2.1.0, <=2.3.2) +9 more potentially affected by CVE-2026-67422 via pymdown-extensions (8.2.0)

pymdown-extensions PYPI version 8.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - dike =0.1.0, =2.1.0, =0.1.0, =0.19.1, =0.13.0, =0.3.0, =2.2.0, =0.1.0, =0.1.6 Source cves: CVE-2026-67422 Source advisory:...

labext-pkg (2.1.3) potentially affected by CVE-2026-67422 via pymdown-extensions (9.4.0)

pymdown-extensions PYPI version 9.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - labext-pkg 2.1.3 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

arkindex-base-worker (>=0.3.1rc5, <=0.3.1) potentially affected by CVE-2026-67422 via pymdown-extensions (9.7.0)

pymdown-extensions PYPI version 9.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.1rc5, =0.3.1 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

arkindex-base-worker (>=0.3.1b1, <=0.3.1rc2), labext-pkg (2.2.0) +3 more potentially affected by CVE-2026-67422 via pymdown-extensions (9.5.0)

pymdown-extensions PYPI version 9.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.1b1, =0.0.4, =0.0.130, =2023.11.4 - stuffpages 0.7.4 Source cves: CVE-2026-67422 Source advisory:...

localchatgpt (>=0.0.1, <=0.0.2) potentially affected by CVE-2026-67422 via pymdown-extensions (10.11.2)

pymdown-extensions PYPI version 10.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - localchatgpt =0.0.1, =0.0.2 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

blog-vi (0.2.6), django-apirouter (>=0.1.0, <=0.2.1) +5 more potentially affected by CVE-2026-67422 via pymdown-extensions (7.1.0)

pymdown-extensions PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - blog-vi 0.2.6 - django-apirouter =0.1.0, =2.1.0, =0.0.4, =0.10.2, =1.4.0, =1.7.0 Source cves: CVE-2026-67422 Source advisory...

aurapro-ui (>=3.1.0, <=3.7.4), leopath (>=0.1.3, <=0.2.1) +2 more potentially affected by CVE-2026-67422 via pymdown-extensions (10.21.0)

pymdown-extensions PYPI version 10.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - aurapro-ui =3.1.0, =0.1.3, =0.4.3, =0.8.11, =0.9.6 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

adeso (>=0.0.1, <=0.0.4), arkindex-base-worker (>=0.3.3rc4, <=0.3.3) +4 more potentially affected by CVE-2026-67422 via pymdown-extensions (10.0.1)

pymdown-extensions PYPI version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - adeso =0.0.1, =0.3.3rc4, =1.1.0, =1.1.0, =1.2.1, =1.0.0, =1.0.3 Source cves: CVE-2026-67422 Source advisory:...

bestatic (>=0.0.34, <=0.0.36), mkdocs-techdocs-core (1.6.1) potentially affected by CVE-2026-67422 via pymdown-extensions (10.19.1)

pymdown-extensions PYPI version 10.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - bestatic =0.0.34, =0.0.36 - mkdocs-techdocs-core 1.6.1 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

mybws (0.1.1) potentially affected by CVE-2026-67422 via pymdown-extensions (10.8.0)

pymdown-extensions PYPI version 10.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mybws 0.1.1 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

arkindex-base-worker (>=0.3.5rc1, <=0.3.5rc5), saasops (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-67422 via pymdown-extensions (10.3.0)

pymdown-extensions PYPI version 10.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.5rc1, =0.1.0, =0.1.1 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

mkdocs-techdocs-core (1.6.2) potentially affected by CVE-2026-67422 via pymdown-extensions (10.21.2)

pymdown-extensions PYPI version 10.21.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-techdocs-core 1.6.2 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

mkdocs-techdocs-core (>=1.5.3, <=1.5.4), mkdocs-zettelkasten (>=0.2.1, <=0.3.1) potentially affected by CVE-2026-67422 via pymdown-extensions (10.14.3)

pymdown-extensions PYPI version 10.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-techdocs-core =1.5.3, =0.2.1, =0.3.1 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

open-webui (>=0.5.17, <=0.6.5), open-webui-steve (0.6.5.45) +1 more potentially affected by CVE-2026-67422 via pymdown-extensions (10.14.2)

pymdown-extensions PYPI version 10.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - open-webui =0.5.17, =0.6.5 - open-webui-steve 0.6.5.45 - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-67422 Source...

foundation-cancer-image-biomarker (>=1.0.1a4, <=1.0.1a5), lpw (0.2.5.0) +1 more potentially affected by CVE-2026-67422 via pymdown-extensions (10.12.0)

pymdown-extensions PYPI version 10.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - foundation-cancer-image-biomarker =1.0.1a4, =1.0.1a5 - lpw 0.2.5.0 - quizwiz 1.0.0 Source cves: CVE-2026-67422 Source...

arguebuf (2.0.0b12), arkindex-base-worker (0.3.7) +26 more potentially affected by CVE-2026-67422 via pymdown-extensions (10.7.1)

pymdown-extensions PYPI version 10.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arguebuf 2.0.0b12 - arkindex-base-worker 0.3.7 - balcony =0.0.86, =0.0.11, =0.1.0, =0.1.1 - bias-ext-approval 0.1.0 -...

pymdown-extensions: exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors

SummaryFour inline processors in pymdown-extensions contain regular expressions withexponential backtracking. A single untrusted Markdown line under50 bytes drives markdown.markdown into unbounded CPU on the rendering threadseconds at 45 bytes, growing exponentially with each added character. All...

freckles (>=0.9.1, <=1.0.0), freckles-adapter-nsbl (>=0.9.0, <=1.0.0) +3 more potentially affected by CVE-2026-67422 via pymdown-extensions (6.0.0)

pymdown-extensions PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - freckles =0.9.1, =0.9.0, =0.9.0, =0.9.0, =1.0.0 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...