PyPI/pymdown-extensions CVE-2025-68142: low, EPSS 0.48%
PyMdown Extensions has a ReDOS bug in its Figure Capture extension
Action: Upgrade pymdown-extensions to 10.16.1 or later.
pip install pymdown-extensions==10.16.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 10.16.1 | - |
Fixed versions
| 10.16.1 |
Sources
- osv: GHSA-r6h4-mm7h-8pmq
- https://github.com/facelessuser/pymdown-extensions/security/advisories/GHSA-r6h4-mm7h-8pmq
- https://nvd.nist.gov/vuln/detail/CVE-2025-68142
- https://github.com/facelessuser/pymdown-extensions/commit/b50d15a56850ed1408a284bba81cc019c6bd72e8
- https://github.com/facelessuser/pymdown-extensions
- https://pypi.org/project/pymdown-extensions/10.16.1
CVE-2025-68142 · published · modified · JSON