pymdown-extensions vulnerabilities

2 known vulnerabilities in pymdown-extensions from Facelessuser. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  pymdown-extensions: Inefficient Regular Expression Complexity

  CVE-2026-67422Aug 6, 2026Facelessuser

  pymdown-extensions is a collection of extensions for the Python Markdown library. In versions up to and including 11.0, four inline processors (caret, tilde, betterem, and magiclink) use regular expressions whose content groups can partition a run of delimiter

• 7.5 High severity

  pymdown-extensions: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-32309May 15, 2023FacelessuserEPSS 1.66%

  PyMdown Extensions is a set of extensions for the `Python-Markdown` markdown project. In affected versions an arbitrary file read is possible when using include file syntax. By using the syntax `--8<--"/etc/passwd"` or `--8<--"/proc/self/environ"` the content