Skip to content
OpenAdvisories

Package · Ubuntu

pymdown-extensions

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.3

    PyMdown Extensions: Regression in pymdownx.snippets reintroduces sibling-prefix path traversal bypass despite restrict_base_path

    PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. From 10.0.1 until 10.21.3, pymdownx.snippets uses a string-prefix containment check in SnippetPreprocessor.get_snippet_path() in pymdownx/snippets.py when `restrict_base_path:…