facelessuser

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

facelessuser records in CISA KEV

No facelessuser vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pymdown Extensions 3 records HIGH Soup Sieve 2 records HIGH

Records

9 records

TI-2026-47703 CVE-2026-67422 · GHSA-gm37-52c6-37mw

pymdown-extensions: Exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors

HIGH 72

pymdown-extensions is a collection of extensions for the Python Markdown library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00608 Published 2026-08-06 Fixed in 11.0.1 CWE-1333

TI-2026-36631 CVE-2026-49477 · GHSA-836r-79rf-4m37

Soup Sieve: Regular Expression Denial of Service (ReDoS) in soupsieve Selector Parser

HIGH 72

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00644 Published 2026-07-14 Partial fix · 2.8.4 CWE-1333

TI-2026-36630 CVE-2026-49476 · GHSA-2wc2-fm75-p42x

Soup Sieve: Memory Exhaustion via Large Comma-Separated Selector Lists in soupsieve

HIGH 72

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00644 Published 2026-07-14 Partial fix · 2.8.4 CWE-400

TI-2023-15603 CVE-2023-32309 · GHSA-jh85-wwv9-24hv

Arbitrary file inclusion with the pymdowm-snippets extension

HIGH 72

PyMdown Extensions is a set of extensions for the `Python-Markdown` markdown project.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01658 Published 2023-05-15 Fixed in 10.0 CWE-22

TI-2026-58861 CVE-2026-86000 · GHSA-gjv8-xp57-g29c

Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patterns

MEDIUM 63

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00609 Published 2026-09-17 Partial fix · 2.9, 2.9.0 CWE-1333

TI-2026-58860 CVE-2026-85999 · GHSA-j934-xhv5-fg8f

Regular expression denial of service in facelessuser soupsieve

MEDIUM 63

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00609 Published 2026-09-17 Partial fix · 2.9, 2.9.0 CWE-1333

TI-2026-44140 CVE-2026-61632 · GHSA-9xwg-3r6f-jcx2

PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path

MEDIUM 63

PyMdown Extensions is a set of extensions for the Python-Markdown markdown project.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00403 Published 2026-08-06 Partial fix · 11.0, 11.0.0 CWE-22

TI-2026-34058 CVE-2026-46338 · GHSA-62q4-447f-wv8h

Path traversal in facelessuser pymdown-extensions

MEDIUM 53

PyMdown Extensions is a set of extensions for the Python-Markdown markdown project.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00398 Published 2026-07-16 Partial fix · 10.21.3 CWE-22

TI-2025-41723 CVE-2025-68142 · GHSA-r6h4-mm7h-8pmq

PyMdown Extensions has ReDOS bug in Figure Capture extension

LOW 20

PyMdown Extensions is a set of extensions for the `Python-Markdown` markdown project.

CVSS 4.0LOW 2.7 Network No auth No interaction EPSS 0.00484 Published 2025-12-16 Partial fix · 10.16.1 CWE-1333

Open these records in search →

Critical	0
High	4
Medium	4
Low	1
No CVSS	0