Facelessuser vulnerabilities
We track 6 vulnerabilities in Facelessuser products across 3 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on November 12, 2026.
Latest Facelessuser vulnerabilities
- 7.5 High severity
soupsieve: Inefficient Regular Expression Complexity
Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 3.0, the CSS_ESCAPES and IDENTIFIER regular-expression subpatterns can backtrack exponentially on runs of ambiguous digit escapes in an attribute-name or tag position of a
- 7.5 High severity
soupsieve: Inefficient Algorithmic Complexity
Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 4.0, Soup Sieve repeatedly walks the same ancestors while matching descendant combinators, and each additional descendant combinator raises the polynomial degree of the wo
- 7.5 High severity
pymdown-extensions: Inefficient Regular Expression Complexity
pymdown-extensions is a collection of extensions for the Python Markdown library. In versions up to and including 11.0, four inline processors (caret, tilde, betterem, and magiclink) use regular expressions whose content groups can partition a run of delimiter
- 7.5 High severity
soupsieve: Uncontrolled Resource Consumption
Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve contains a regular expression vulnerable to catastrophic backtracking when processing an attribute selector with an unterminate
- 7.5 High severity
soupsieve: Uncontrolled Resource Consumption
Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve allocates unbounded memory when compiling large comma-separated selector lists, allowing an attacker who can supply a crafted s
- 7.5 High severity
pymdown-extensions: Improper Limitation of a Pathname to a Restricted Directory
PyMdown Extensions is a set of extensions for the `Python-Markdown` markdown project. In affected versions an arbitrary file read is possible when using include file syntax. By using the syntax `--8<--"/etc/passwd"` or `--8<--"/proc/self/environ"` the content