pymdown-extensions has 4 CVEs on record between 2023 and 2026. The median CVSS is 5.3 (medium).
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.3
- Publish → KEV
- —
- Last 90 days
- 0 prev 2
Weakness classes
Products
- pymdown-extensions 4
4
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2023-32309High· 7.5Any file can be included with the pymdown-snippets extension54CVE-2026-61632Medium· 5.3PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path29CVE-2026-46338Medium· 4.3Regression in pymdownx.snippets reintroduces sibling-prefix path traversal bypass despite restrict_base_path24CVE-2025-68142LowPyMdown Extensions has a ReDOS bug in its Figure Capture extension14
pymdown-extensions vulnerabilities
CVEs affecting pymdown-extensions, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-61632Medium· 5.3PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path
PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path
▾ Sunlitpymdown-extensions · pymdown-extensionsEPSS 0.40%via OSV
CVE-2026-46338Medium· 4.3Regression in pymdownx.snippets reintroduces sibling-prefix path traversal bypass despite restrict_base_path
Regression in pymdownx.snippets reintroduces sibling-prefix path traversal bypass despite restrict_base_path
▾ Sunlitpymdown-extensions · pymdown-extensionsEPSS 0.40%via OSV
CVE-2025-68142LowPyMdown Extensions has a ReDOS bug in its Figure Capture extension
PyMdown Extensions has a ReDOS bug in its Figure Capture extension
▾ Sunlitpymdown-extensions · pymdown-extensionsEPSS 0.48%via OSV
CVE-2023-32309High· 7.5PoCAny file can be included with the pymdown-snippets extension
Any file can be included with the pymdown-snippets extension
▾ Midnightpymdown-extensions · pymdown-extensionsEPSS 1.7%via OSV