mkdocs-techdocs-core (1.2.0) potentially affected by CVE-2026-61632 via pymdown-extensions (9.9.1)

pymdown-extensions PYPI version 9.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-techdocs-core 1.2.0 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JCX2...

docwriter (1.2.0), liara (>=2.0.0a1, <=2.0.0a6) +1 more potentially affected by CVE-2026-61632 via pymdown-extensions (6.2.1)

pymdown-extensions PYPI version 6.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - docwriter 1.2.0 - liara =2.0.0a1, =4.5.0, =4.6.0 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JCX2...

arctic-ai (0.1.0), arkindex-base-worker (>=0.3.2rc5, <=0.3.2) potentially affected by CVE-2026-61632 via pymdown-extensions (9.9.2)

pymdown-extensions PYPI version 9.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arctic-ai 0.1.0 - arkindex-base-worker =0.3.2rc5, =0.3.2 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JCX...

adeso (>=0.0.1, <=0.0.4), arkindex-base-worker (>=0.3.3rc4, <=0.3.3) +4 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.0.1)

pymdown-extensions PYPI version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - adeso =0.0.1, =0.3.3rc4, =1.1.0, =1.1.0, =1.2.1, =1.0.0, =1.0.3 Source cves: CVE-2026-61632 Source advisory:...

adze-modeler (0.0.1), arkindex-base-worker (>=0.3.3rc1, <=0.3.3rc3) +27 more potentially affected by CVE-2026-61632 via pymdown-extensions (9.11.0)

pymdown-extensions PYPI version 9.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - adze-modeler 0.0.1 - arkindex-base-worker =0.3.3rc1, =0.2.0, =1.1.3, =0.3.3, =0.1.1, =0.2.4, =2.3.3, =0.4.0, =0.5.0, =0.6.1...

aurapro-ui (>=3.1.0, <=3.7.4), leopath (>=0.1.3, <=0.2.1) +2 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.21.0)

pymdown-extensions PYPI version 10.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - aurapro-ui =3.1.0, =0.1.3, =0.4.3, =0.8.11, =0.9.6 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JCX2...

foundation-cancer-image-biomarker (>=1.0.1a4, <=1.0.1a5), lpw (0.2.5.0) +1 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.12.0)

pymdown-extensions PYPI version 10.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - foundation-cancer-image-biomarker =1.0.1a4, =1.0.1a5 - lpw 0.2.5.0 - quizwiz 1.0.0 Source cves: CVE-2026-61632 Source...

freckles (>=0.9.1, <=1.0.0), freckles-adapter-nsbl (>=0.9.0, <=1.0.0) +3 more potentially affected by CVE-2026-61632 via pymdown-extensions (6.0.0)

pymdown-extensions PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - freckles =0.9.1, =0.9.0, =0.9.0, =0.9.0, =1.0.0 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JCX2...

iga (1.3.0), labext-pkg (2.3.1) +2 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.8.1)

pymdown-extensions PYPI version 10.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - iga 1.3.0 - labext-pkg 2.3.1 - markdown-live-preview =0.2.67, =12.0.25, =12.0.26 Source cves: CVE-2026-61632 Source advisor...

dike (>=0.1.0, <=0.4.0), liara (>=2.1.0, <=2.3.2) +9 more potentially affected by CVE-2026-61632 via pymdown-extensions (8.2.0)

pymdown-extensions PYPI version 8.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - dike =0.1.0, =2.1.0, =0.1.0, =0.19.1, =0.13.0, =0.3.0, =2.2.0, =0.1.0, =0.1.6 Source cves: CVE-2026-61632 Source advisory:...

arkindex-base-worker (>=0.3.4rc1, <=0.3.4), mkdocs-techdocs-core (>=1.3.0, <=1.3.1) potentially affected by CVE-2026-61632 via pymdown-extensions (10.2.0)

pymdown-extensions PYPI version 10.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.4rc1, =1.3.0, =1.3.1 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JCX2...

mybws (0.1.1) potentially affected by CVE-2026-61632 via pymdown-extensions (10.8.0)

pymdown-extensions PYPI version 10.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mybws 0.1.1 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JCX2...

arkindex-base-worker (>=0.3.7rc2, <=0.3.7rc10), mafiagg (>=1.0.0, <=1.0.4) +1 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.7.0)

pymdown-extensions PYPI version 10.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.7rc2, =1.0.0, =0.2.54, =0.2.65 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JC...

labext-pkg (2.1.1), mkdocs-techdocs-core (>=0.2.3, <=1.0.1) potentially affected by CVE-2026-61632 via pymdown-extensions (9.0.0)

pymdown-extensions PYPI version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - labext-pkg 2.1.1 - mkdocs-techdocs-core =0.2.3, =1.0.1 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JCX2...

aiagents4pharma (>=0.0.0, <=1.49.1), aiagents4pharma-ansh (0.0.0) +127 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.21.3)

pymdown-extensions PYPI version 10.21.3 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - aiagents4pharma =0.0.0, =0.1.0, =0.5.0a1, =0.1.0, =3.8.0, =0.1.0, =2025.9.131446, =0.2.0b1, =1.0.4, =0.1.0, =0.2.1 and mor...

open-webui (>=0.5.17, <=0.6.5), open-webui-steve (0.6.5.45) +1 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.14.2)

pymdown-extensions PYPI version 10.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - open-webui =0.5.17, =0.6.5 - open-webui-steve 0.6.5.45 - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-61632 Source...

PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path

Summary The b64 extension inlines images referenced by as base64 data URIs. When resolving the src path it joins it onto the configured basepath with os.path.normpath and opens the result directly, with no check that the resolved path stays inside basepath. A src containing ../ sequences, or an...

arkindex-base-worker (>=0.3.1b1, <=0.3.1rc2), labext-pkg (2.2.0) +3 more potentially affected by CVE-2026-61632 via pymdown-extensions (9.5.0)

pymdown-extensions PYPI version 9.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.1b1, =0.0.4, =0.0.130, =2023.11.4 - stuffpages 0.7.4 Source cves: CVE-2026-61632 Source advisory:...

open-webui (>=0.8.0, <=0.8.8) potentially affected by CVE-2026-61632 via pymdown-extensions (10.20.1)

pymdown-extensions PYPI version 10.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - open-webui =0.8.0, =0.8.8 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JCX2...

arkindex-base-worker (>=0.3.5rc1, <=0.3.5rc5), saasops (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-61632 via pymdown-extensions (10.3.0)

pymdown-extensions PYPI version 10.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.5rc1, =0.1.0, =0.1.1 Source cves: CVE-2026-61632 Source advisory: OSV:GHSA-9XWG-3R6F-JCX2...