VULNERABILITY INTELLIGENCE

CVE-2026-46338

CVSS score4.3 MEDIUM

EPSS probability0.41%

CISA KEVNot currently listed

Published2026-07-16

Last modified2026-10-24

Description

PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. From 10.0.1 until 10.21.3, pymdownx.snippets uses a string-prefix containment check in SnippetPreprocessor.get_snippet_path() in pymdownx/snippets.py when `restrict_base_path: True`, allowing markdown snippet directi…