Skip to content
OpenAdvisories

Package · Debian

pymdown-extensions

5 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.5

    pymdown-extensions: Exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors

    pymdown-extensions is a collection of extensions for the Python Markdown library. In versions up to and including 11.0, four inline processors (caret, tilde, betterem, and magiclink) use regular expressions whose content groups can partition a run of delimite…

  • High 7.5
    CVE-2023-32309 Public exploit

    Arbitrary file inclusion with the pymdowm-snippets extension

    PyMdown Extensions is a set of extensions for the `Python-Markdown` markdown project. In affected versions an arbitrary file read is possible when using include file syntax. By using the syntax `--8<--"/etc/passwd"` or `--8<--"/proc/self/environ"` the content…