Detections
Analytics

SCA: security update for pymdown-extensions (GHSA-9xwg-3r6f-jcx2)

medium Tenable Self-Hosted Container Security Plugin ID 445281

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. In versions up to and
 including 10.21.3, the b64 extension is vulnerable to a path traversal that discloses arbitrary files: it
 inlines images referenced by <img src="..."> by joining the src onto the configured base_path with
 os.path.normpath and opening the result directly, without verifying that the resolved path stays inside
 base_path. As a result, an src containing ../ sequences or an absolute path reads a file outside base_path
 as long as it has an allowed image extension (.png, .jpg, .jpeg, .gif, .svg), and the file's contents are
 then base64-encoded into the rendered output, disclosing them. An application that renders untrusted
 Markdown with pymdownx.b64 enabled can therefore leak the contents of image-extension files readable by
 the process to whoever controls the Markdown or views the output, a targeted file-read bounded by the
 extension check. This issue has been fixed in version 11.0. (CVE-2026-61632)

Solution

Update the pymdown-extensions library and its related packages to version 11.0.0 or later.

See Also

https://github.com/advisories/GHSA-9xwg-3r6f-jcx2

Plugin Details

Severity: Medium

ID: 445281

Version: Revision 1.3

Type: Local

Family: SCA Checks

Published: 7/24/2026

Updated: 8/7/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 1.2

Percentile: 0.01

Vendor

Vendor Severity: Medium

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS Score Source: CVE-2026-61632

CVSS v3

Risk Factor: Medium

Base Score: 5.3

Temporal Score: 4.6

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 7/24/2026

Vulnerability Publication Date: 7/24/2026

Reference Information

CVE: CVE-2026-61632

cwe: CWE-22