CVE-2026-67422
2 advisories.
PyPI/pymdown-extensions CVE-2026-67422: high 7.5, EPSS 0.61%
pymdown-extensions: exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors
Action: Upgrade pymdown-extensions to 11.0.1 or later.
pip install pymdown-extensions==11.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 11.0.1 | - |
Fixed versions
| 11.0.1 |
Sources
- osv: GHSA-gm37-52c6-37mw
- https://github.com/facelessuser/pymdown-extensions/security/advisories/GHSA-gm37-52c6-37mw
- https://nvd.nist.gov/vuln/detail/CVE-2026-67422
- https://github.com/facelessuser/pymdown-extensions/commit/c68498598d7b13011bb4571350b6e3612a4ce44b
- https://github.com/facelessuser/pymdown-extensions
CVE-2026-67422 · published · modified · JSON
PyPI/pymdown-extensions CVE-2026-67422: high 7.5, EPSS 0.61%
pymdown-extensions: exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors
Action: Upgrade pymdown-extensions to 11.0.1 or later.
pip install pymdown-extensions==11.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 11.0.1 | - |
Fixed versions
| 11.0.1 |
Sources
- osv: PYSEC-2026-3654
- https://github.com/facelessuser/pymdown-extensions/security/advisories/GHSA-gm37-52c6-37mw
- https://nvd.nist.gov/vuln/detail/CVE-2026-67422
- https://github.com/facelessuser/pymdown-extensions/commit/c68498598d7b13011bb4571350b6e3612a4ce44b
- https://github.com/facelessuser/pymdown-extensions
- https://pypi.org/project/pymdown-extensions
- https://github.com/advisories/GHSA-gm37-52c6-37mw
CVE-2026-67422 · published · modified · JSON