Security Advisory

CVE-2026-46338

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-16 18:24:18

Last updated 2026-07-17 17:52:57

Assigner GitHub_M

CVSS score 4.3

State PUBLISHED

Description

PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. From 10.0.1 until 10.21.3, pymdownx.snippets uses a string-prefix containment check in SnippetPreprocessor.get_snippet_path() in pymdownx/snippets.py when `restrict_base_path: True`, allowing markdown snippet directives to read files from sibling paths that share the same base_path prefix, such as docs and docs_internal. This is a regression of CVE-2023-32309. This issue is fixed in version 10.21.3.

← Browse all CVEs View on cve.org ↗