VYPR

PyMdown Extensions

by Python (programming language)

CVEs (1)

  • CVE-2026-61632medJul 24, 2026
    risk 0.26cvss epss

    ### Summary The `b64` extension inlines images referenced by `` as base64 data URIs. When resolving the `src` path it joins it onto the configured `base_path` with `os.path.normpath` and opens the result directly, with no check that the resolved path stays inside…