Product by Facelessuser
Pymdown-extensions
5 known vulnerabilities in Pymdown-extensions (Facelessuser), 0 of them actively exploited (CISA KEV).
Key figures
5
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2023-32309 | Arbitrary file inclusion with the pymdowm-snippets extension | 7.5 | |
| High | CVE-2026-67422 | Facelessuser Pymdown-extensions: Inefficient Regular Expression Complexity | 7.5 | |
| Medium | CVE-2026-61632 | PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path | 5.3 | |
| Medium | CVE-2025-68142 | PyMdown Extensions has ReDOS bug in Figure Capture extension | 5.3 | |
| Medium | CVE-2026-46338 | Facelessuser Pymdown-extensions: Path Traversal | 4.3 |