🛡️ CVE-2026-61632 | facelessuser PyMdown Extensions up to 10.21.3 b64 Extension pymdownx.b64 os.path.normpath src path traversal (Nessus ID 333365)

A vulnerability classified as problematic has been found in facelessuser PyMdown Extensions up to 10.21.3. Affected is the function os.path.normpath of the file pymdownx.b64 of the component b64 Extension. Performing a manipulation of the argument src results in path traversal.

This vulnerability is reported as CVE-2026-61632. The attack is...