Facelessuser

Pymdown Extensions

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
  • EPSS 0.58%
  • Veröffentlicht 06.08.2026 22:18:21
  • Zuletzt bearbeitet 07.08.2026 17:17:06

pymdown-extensions is a collection of extensions for the Python Markdown library. In versions up to and including 11.0, four inline processors (caret, tilde, betterem, and magiclink) use regular expressions whose content groups can partition a run of...

  • EPSS 0.4%
  • Veröffentlicht 06.08.2026 22:18:11
  • Zuletzt bearbeitet 07.08.2026 18:17:19

PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. In versions up to and including 10.21.3, the b64 extension is vulnerable to a path traversal that discloses arbitrary files: it inlines images referenced by <img src=...

Exploit
  • EPSS 0.31%
  • Veröffentlicht 16.07.2026 18:24:18
  • Zuletzt bearbeitet 30.07.2026 14:28:41

PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. From 10.0.1 until 10.21.3, pymdownx.snippets uses a string-prefix containment check in SnippetPreprocessor.get_snippet_path() in pymdownx/snippets.py when `restrict_b...

Exploit
  • EPSS 0.41%
  • Veröffentlicht 16.12.2025 18:06:37
  • Zuletzt bearbeitet 03.02.2026 18:56:25

PyMdown Extensions is a set of extensions for the `Python-Markdown` markdown project. Versions prior to 10.16.1 have a ReDOS bug found within the figure caption extension (`pymdownx.blocks.caption`). In systems that take unchecked user content, this ...

Exploit
  • EPSS 1.66%
  • Veröffentlicht 15.05.2023 21:15:09
  • Zuletzt bearbeitet 03.02.2026 21:06:43

PyMdown Extensions is a set of extensions for the `Python-Markdown` markdown project. In affected versions an arbitrary file read is possible when using include file syntax. By using the syntax `--8<--"/etc/passwd"` or `--8<--"/proc/self/environ"` th...