Beveiligingsadvies

CVE-2026-46338

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-16 18:24:18

Laatst bijgewerkt 2026-07-17 17:52:57

Toegewezen door GitHub_M

CVSS-score 4.3

Status PUBLISHED

Beschrijving

PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. From 10.0.1 until 10.21.3, pymdownx.snippets uses a string-prefix containment check in SnippetPreprocessor.get_snippet_path() in pymdownx/snippets.py when `restrict_base_path: True`, allowing markdown snippet directives to read files from sibling paths that share the same base_path prefix, such as docs and docs_internal. This is a regression of CVE-2023-32309. This issue is fixed in version 10.21.3.

← Alle CVE's bekijken Bekijk op cve.org ↗