Lucene search
+L

2 matches found

OSV
OSV
•added 2026/09/30 1:47 p.m.•6 views

OESA-2026-4182 python-pymdown-extensions security update

Extension pack for Python Markdown. Security Fixes: PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. From 10.0.1 until 10.21.3, pymdownx.snippets uses a string-prefix containment check in SnippetPreprocessor.getsnippetpath in pymdownx/snippets.py when...

7.5CVSS5.8AI score0.00608EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/16 12:00 a.m.•3 views

CVE-2026-46338: Improper Limitation of a Pathname to a Restricted Directory

PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. From 10.0.1 until 10.21.3, pymdownx.snippets uses a string-prefix containment check in SnippetPreprocessor.getsnippetpath in pymdownx/snippets.py when restrictbasepath: True, allowing markdown snippet directives t...

4.3CVSS5.9AI score0.00398EPSS
SaveExploits1References5
Rows per page
Query Builder