Executive brief
PyMdown Extensions has a ReDOS bug in its Figure Capture extension
Affected products
- PyPI pymdown-extensions
Junglewise Threat Intelligence
CVE-2025-68142: PYSEC-2026-1825 - PyMdown Extensions has a ReDOS bug in its Figure Capture extension
CVE-2025-68142 · Severity: medium · CVSS 4 · Published 2026-07-07
Technologies: pymdown-extensions (PyPI). Vendors: PyPI.
Related threats
- pymdown-extensions is a collection of extensions for the Python Markdown library. In versions up to and including 11.0, four inline processo
- PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. In versions up to and including 10.21.3, the b64 extensi
- facelessuser PyMdown Extensions path traversal in snippets extension
- PYSEC-2026-1824 - Any file can be included with the pymdown-snippets extension