SB2026100169 - openEuler 24.03 LTS SP1 update for python-pymdown-extensions
Published: October 1, 2026 Updated: October 1, 2026
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 4 vulnerabilities.
1) Path traversal (CVE-ID: CVE-2026-46338)
CWE-ID: CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to disclose sensitive information.
The vulnerability exists due to path traversal in SnippetPreprocessor.get_snippet_path() in pymdownx.snippets when processing a markdown snippet directive. A remote attacker can supply a crafted snippet path that traverses to a sibling directory sharing the same base-path prefix to disclose sensitive information.
User interaction is required to process attacker-controlled markdown content, such as in a documentation build pipeline.
2) Path traversal (CVE-ID: CVE-2026-61632)
CWE-ID: CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to perform directory traversal attacks.
The vulnerability exists due to input validation error when processing directory traversal sequences in the b64 extension. A remote attacker can send a specially crafted HTTP request and read arbitrary files on the system.
3) Inefficient regular expression complexity (CVE-ID: CVE-2026-67422)
CWE-ID: CWE-1333 - Inefficient Regular Expression Complexity
CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to cause a denial of service.
The vulnerability exists due to inefficient regular expression complexity in the caret, tilde, betterem, and magiclink inline processors when rendering untrusted Markdown input through the public API in the default configuration. A remote attacker can submit a specially crafted Markdown line to cause a denial of service.
A single untrusted Markdown line under 50 bytes can drive the rendering thread into unbounded CPU usage.
4) Path traversal (CVE-ID: CVE-2023-32309)
CWE-ID: CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to perform directory traversal attacks.
The vulnerability exists due to input validation error when processing directory traversal sequences. A remote attacker can send a specially crafted HTTP request and read arbitrary files on the system.
Remediation
Install update from vendor's website.