Skip to content
OpenAdvisories

Package · Ubuntu

markdown

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-61632

    PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path

    PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. In versions up to and including 10.21.3, the b64 extension is vulnerable to a path traversal that discloses arbitrary files: it inlines images referenced by <img src="..."> by…

    facelessuser pymdown-extensions pymdown-extensions pymdown-extensions Debian Ubuntu PyPI
  • Medium 6.1
    CVE-2026-71478

    league/commonmark: AttributesExtension href/src unsafe-link filter bypass via embedded control bytes

    league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 1.5.0 until 2.9.0, the AttributesExtension's href and src unsafe-link filter can be bypassed by embedding control bytes, such as a tab, carriage return, line feed, or leadi…

    thephpleague commonmark league/commonmark php-league-commonmark Debian Ubuntu Packagist