pymdown-extensions
PyPI · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| pymdown-extensions: exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors | pymdown-extensions | PyPI | High | Fix reported | |
| PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path | pymdown-extensionsRed Hat Developer Hub 1/rhdh/rhdh-hub-rhel9 | PyPIRed Hat | Medium | Fix reported | |
| Regression in pymdownx.snippets reintroduces sibling-prefix path traversal bypass despite restrict_base_path | pymdown-extensionsRed Hat Developer Hub 1/rhdh/rhdh-hub-rhel9 | PyPIRed Hat | Medium | Fix reported | |
| Any file can be included with the pymdown-snippets extension | pymdown-extensions | PyPI | High | Fix reported | |
| PyMdown Extensions has a ReDOS bug in its Figure Capture extension | pymdown-extensionsAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 | PyPIRed Hat | Low | Fix reported |