Known vulnerabilities in pymdown-extensions
Vendor:
facelessuser (Isaac Muse)
Software:
pymdown-extensions
Software CPE:
cpe:2.3:a:facelessuser:pymdown-extensions:*:*:*:*:*:*:*:*
Website:
https://github.com/facelessuser/
Total vulnerabilities:
5
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
11.0.2
11.0.1
11.0
10.21.3
10.21.2
10.21
10.21.1
10.20
10.19.1
10.19
10.18
10.17.2
10.17.1
10.17
10.16.1
10.16
10.15
10.14.3
10.14.2
10.14.1
10.14
10.13
10.12
10.11.2
10.11.1
10.11
10.10.2
10.10.1
10.10
10.9
10.8.1
10.8
10.7.1
10.7
10.6
10.5
10.4
10.3.1
10.3
10.2.1
10.2
10.1.0
10.0.1
10.0
9.11
9.10b5
9.10b4
9.10b3
9.10b2
9.10b1
9.10a3
9.10a2
9.10a1
9.10
9.9.2
9.9.1
9.9
9.8
9.7
9.6
9.5
9.4
9.3
9.2
9.1
9.0
8.2
8.1.1
8.1
8.0.1
8.0
7.1
7.0.0rc2
7.0.0rc1
7.0.0b2
7.0.0b1
7.0.0
6.3.0
6.2.1
6.2.0
6.1.0
6.0.0
5.0.0
4.12.0
4.11.0
4.10.2
4.10.1
4.10.0
4.9.2
4.9.1
4.9.0
4.8.0
4.7.0
4.6.0
4.5.1
4.5.0
4.4.0
4.3.0
4.2.0
4.1.0
4.0.0
3.5.0
3.4.0
3.3.0
3.2.1
3.2
3.1
3.0
2.0
1.8.0
1.7.0
1.6.1
1.6.0
1.5.0
1.4.0
1.3.0
1.2.0
1.1.0
1.0.0
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU140821 - Inefficient Regular Expression Complexity CVE-2026-67422 |
CWE-1333 | Medium | 11.0.1 | 03.08.2026 |
SB2026080391 |
||
| #VU137384 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-61632 |
CWE-22 | Medium | 11.0 | 13.07.2026 |
SB2026071319 |
||
| #VU131443 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-46338 |
CWE-22 | Low | 10.21.3 | 14.05.2026 |
SB2026051516 |
||
| #VU128325 - Inefficient Regular Expression Complexity CVE-2025-68142 |
CWE-1333 | Medium | 10.16.1 | 28.04.2026 |
SB2026042868 |
||
| #VU77598 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2023-32309 |
CWE-22 | Medium | 10.0 | 21.06.2023 |
SB2023062140 SB2023051550 |