CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-68142

PyMdown Extensions is a set of extensions for the `Python-Markdown` markdown project. Versions prior to 10.16.1 have a ReDOS bug found within the figure caption extension (`pymdownx.blocks.caption`). In systems that take unchecked user content, this could cause long hanges when processing the data if a malicious payload was crafted. This issue is patched in Release 10.16.1. As a workaround, those who process unknown user content without timeouts or other safeguards in place to prevent really large, malicious content being aimed at systems may avoid the use of `pymdownx.blocks.caption` until they're able to upgrade.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 17.8%

CVSS Severity

CVSS v3 Score 5.3

References

Products affected by CVE-2025-68142

Facelessuser » Pymdown Extensions » Version: 1.0.0

cpe:2.3:a:facelessuser:pymdown_extensions:1.0.0
Facelessuser » Pymdown Extensions » Version: 1.1.0

cpe:2.3:a:facelessuser:pymdown_extensions:1.1.0
Facelessuser » Pymdown Extensions » Version: 1.2.0

cpe:2.3:a:facelessuser:pymdown_extensions:1.2.0
Facelessuser » Pymdown Extensions » Version: 1.3.0

cpe:2.3:a:facelessuser:pymdown_extensions:1.3.0
Facelessuser » Pymdown Extensions » Version: 1.4.0

cpe:2.3:a:facelessuser:pymdown_extensions:1.4.0
Facelessuser » Pymdown Extensions » Version: 1.5.0

cpe:2.3:a:facelessuser:pymdown_extensions:1.5.0
Facelessuser » Pymdown Extensions » Version: 1.6.0

cpe:2.3:a:facelessuser:pymdown_extensions:1.6.0
Facelessuser » Pymdown Extensions » Version: 1.6.1

cpe:2.3:a:facelessuser:pymdown_extensions:1.6.1
Facelessuser » Pymdown Extensions » Version: 1.7.0

cpe:2.3:a:facelessuser:pymdown_extensions:1.7.0
Facelessuser » Pymdown Extensions » Version: 1.8.0

cpe:2.3:a:facelessuser:pymdown_extensions:1.8.0
Facelessuser » Pymdown Extensions » Version: 10.0

cpe:2.3:a:facelessuser:pymdown_extensions:10.0
Facelessuser » Pymdown Extensions » Version: 10.0.1

cpe:2.3:a:facelessuser:pymdown_extensions:10.0.1
Facelessuser » Pymdown Extensions » Version: 10.1

cpe:2.3:a:facelessuser:pymdown_extensions:10.1
Facelessuser » Pymdown Extensions » Version: 10.10

cpe:2.3:a:facelessuser:pymdown_extensions:10.10
Facelessuser » Pymdown Extensions » Version: 10.10.1

cpe:2.3:a:facelessuser:pymdown_extensions:10.10.1
Facelessuser » Pymdown Extensions » Version: 10.10.2

cpe:2.3:a:facelessuser:pymdown_extensions:10.10.2
Facelessuser » Pymdown Extensions » Version: 10.11

cpe:2.3:a:facelessuser:pymdown_extensions:10.11
Facelessuser » Pymdown Extensions » Version: 10.11.1

cpe:2.3:a:facelessuser:pymdown_extensions:10.11.1
Facelessuser » Pymdown Extensions » Version: 10.11.2

cpe:2.3:a:facelessuser:pymdown_extensions:10.11.2
Facelessuser » Pymdown Extensions » Version: 10.12

cpe:2.3:a:facelessuser:pymdown_extensions:10.12
Facelessuser » Pymdown Extensions » Version: 10.13

cpe:2.3:a:facelessuser:pymdown_extensions:10.13
Facelessuser » Pymdown Extensions » Version: 10.14

cpe:2.3:a:facelessuser:pymdown_extensions:10.14
Facelessuser » Pymdown Extensions » Version: 10.14.1

cpe:2.3:a:facelessuser:pymdown_extensions:10.14.1
Facelessuser » Pymdown Extensions » Version: 10.14.2

cpe:2.3:a:facelessuser:pymdown_extensions:10.14.2
Facelessuser » Pymdown Extensions » Version: 10.14.3

cpe:2.3:a:facelessuser:pymdown_extensions:10.14.3
Facelessuser » Pymdown Extensions » Version: 10.15

cpe:2.3:a:facelessuser:pymdown_extensions:10.15
Facelessuser » Pymdown Extensions » Version: 10.16

cpe:2.3:a:facelessuser:pymdown_extensions:10.16
Facelessuser » Pymdown Extensions » Version: 10.2

cpe:2.3:a:facelessuser:pymdown_extensions:10.2
Facelessuser » Pymdown Extensions » Version: 10.2.1

cpe:2.3:a:facelessuser:pymdown_extensions:10.2.1
Facelessuser » Pymdown Extensions » Version: 10.3

cpe:2.3:a:facelessuser:pymdown_extensions:10.3
Facelessuser » Pymdown Extensions » Version: 10.3.1

cpe:2.3:a:facelessuser:pymdown_extensions:10.3.1
Facelessuser » Pymdown Extensions » Version: 10.4

cpe:2.3:a:facelessuser:pymdown_extensions:10.4
Facelessuser » Pymdown Extensions » Version: 10.5

cpe:2.3:a:facelessuser:pymdown_extensions:10.5
Facelessuser » Pymdown Extensions » Version: 10.6

cpe:2.3:a:facelessuser:pymdown_extensions:10.6
Facelessuser » Pymdown Extensions » Version: 10.7

cpe:2.3:a:facelessuser:pymdown_extensions:10.7
Facelessuser » Pymdown Extensions » Version: 10.7.1

cpe:2.3:a:facelessuser:pymdown_extensions:10.7.1
Facelessuser » Pymdown Extensions » Version: 10.8

cpe:2.3:a:facelessuser:pymdown_extensions:10.8
Facelessuser » Pymdown Extensions » Version: 10.8.1

cpe:2.3:a:facelessuser:pymdown_extensions:10.8.1
Facelessuser » Pymdown Extensions » Version: 10.9

cpe:2.3:a:facelessuser:pymdown_extensions:10.9
Facelessuser » Pymdown Extensions » Version: 2.0

cpe:2.3:a:facelessuser:pymdown_extensions:2.0
Facelessuser » Pymdown Extensions » Version: 3.0

cpe:2.3:a:facelessuser:pymdown_extensions:3.0
Facelessuser » Pymdown Extensions » Version: 3.1

cpe:2.3:a:facelessuser:pymdown_extensions:3.1
Facelessuser » Pymdown Extensions » Version: 3.2

cpe:2.3:a:facelessuser:pymdown_extensions:3.2
Facelessuser » Pymdown Extensions » Version: 3.2.1

cpe:2.3:a:facelessuser:pymdown_extensions:3.2.1
Facelessuser » Pymdown Extensions » Version: 3.3.0

cpe:2.3:a:facelessuser:pymdown_extensions:3.3.0
Facelessuser » Pymdown Extensions » Version: 3.4.0

cpe:2.3:a:facelessuser:pymdown_extensions:3.4.0
Facelessuser » Pymdown Extensions » Version: 3.5.0

cpe:2.3:a:facelessuser:pymdown_extensions:3.5.0
Facelessuser » Pymdown Extensions » Version: 4.0.0

cpe:2.3:a:facelessuser:pymdown_extensions:4.0.0
Facelessuser » Pymdown Extensions » Version: 4.1.0

cpe:2.3:a:facelessuser:pymdown_extensions:4.1.0
Facelessuser » Pymdown Extensions » Version: 4.10.0

cpe:2.3:a:facelessuser:pymdown_extensions:4.10.0
Facelessuser » Pymdown Extensions » Version: 4.10.1

cpe:2.3:a:facelessuser:pymdown_extensions:4.10.1
Facelessuser » Pymdown Extensions » Version: 4.10.2

cpe:2.3:a:facelessuser:pymdown_extensions:4.10.2
Facelessuser » Pymdown Extensions » Version: 4.11.0

cpe:2.3:a:facelessuser:pymdown_extensions:4.11.0
Facelessuser » Pymdown Extensions » Version: 4.12.0

cpe:2.3:a:facelessuser:pymdown_extensions:4.12.0
Facelessuser » Pymdown Extensions » Version: 4.2.0

cpe:2.3:a:facelessuser:pymdown_extensions:4.2.0
Facelessuser » Pymdown Extensions » Version: 4.3.0

cpe:2.3:a:facelessuser:pymdown_extensions:4.3.0
Facelessuser » Pymdown Extensions » Version: 4.4.0

cpe:2.3:a:facelessuser:pymdown_extensions:4.4.0
Facelessuser » Pymdown Extensions » Version: 4.5.0

cpe:2.3:a:facelessuser:pymdown_extensions:4.5.0
Facelessuser » Pymdown Extensions » Version: 4.5.1

cpe:2.3:a:facelessuser:pymdown_extensions:4.5.1
Facelessuser » Pymdown Extensions » Version: 4.6.0

cpe:2.3:a:facelessuser:pymdown_extensions:4.6.0
Facelessuser » Pymdown Extensions » Version: 4.7.0

cpe:2.3:a:facelessuser:pymdown_extensions:4.7.0
Facelessuser » Pymdown Extensions » Version: 4.8.0

cpe:2.3:a:facelessuser:pymdown_extensions:4.8.0
Facelessuser » Pymdown Extensions » Version: 4.9.0

cpe:2.3:a:facelessuser:pymdown_extensions:4.9.0
Facelessuser » Pymdown Extensions » Version: 4.9.1

cpe:2.3:a:facelessuser:pymdown_extensions:4.9.1
Facelessuser » Pymdown Extensions » Version: 4.9.2

cpe:2.3:a:facelessuser:pymdown_extensions:4.9.2
Facelessuser » Pymdown Extensions » Version: 5.0.0

cpe:2.3:a:facelessuser:pymdown_extensions:5.0.0
Facelessuser » Pymdown Extensions » Version: 6.0.0

cpe:2.3:a:facelessuser:pymdown_extensions:6.0.0
Facelessuser » Pymdown Extensions » Version: 6.1.0

cpe:2.3:a:facelessuser:pymdown_extensions:6.1.0
Facelessuser » Pymdown Extensions » Version: 6.2.0

cpe:2.3:a:facelessuser:pymdown_extensions:6.2.0
Facelessuser » Pymdown Extensions » Version: 6.2.1

cpe:2.3:a:facelessuser:pymdown_extensions:6.2.1
Facelessuser » Pymdown Extensions » Version: 6.3.0

cpe:2.3:a:facelessuser:pymdown_extensions:6.3.0
Facelessuser » Pymdown Extensions » Version: 7.0.0

cpe:2.3:a:facelessuser:pymdown_extensions:7.0.0
Facelessuser » Pymdown Extensions » Version: 7.1

cpe:2.3:a:facelessuser:pymdown_extensions:7.1
Facelessuser » Pymdown Extensions » Version: 8.0

cpe:2.3:a:facelessuser:pymdown_extensions:8.0
Facelessuser » Pymdown Extensions » Version: 8.0.1

cpe:2.3:a:facelessuser:pymdown_extensions:8.0.1
Facelessuser » Pymdown Extensions » Version: 8.1

cpe:2.3:a:facelessuser:pymdown_extensions:8.1
Facelessuser » Pymdown Extensions » Version: 8.1.1

cpe:2.3:a:facelessuser:pymdown_extensions:8.1.1
Facelessuser » Pymdown Extensions » Version: 8.2

cpe:2.3:a:facelessuser:pymdown_extensions:8.2
Facelessuser » Pymdown Extensions » Version: 9.0

cpe:2.3:a:facelessuser:pymdown_extensions:9.0
Facelessuser » Pymdown Extensions » Version: 9.1

cpe:2.3:a:facelessuser:pymdown_extensions:9.1
Facelessuser » Pymdown Extensions » Version: 9.10

cpe:2.3:a:facelessuser:pymdown_extensions:9.10
Facelessuser » Pymdown Extensions » Version: 9.11

cpe:2.3:a:facelessuser:pymdown_extensions:9.11
Facelessuser » Pymdown Extensions » Version: 9.2

cpe:2.3:a:facelessuser:pymdown_extensions:9.2
Facelessuser » Pymdown Extensions » Version: 9.3

cpe:2.3:a:facelessuser:pymdown_extensions:9.3
Facelessuser » Pymdown Extensions » Version: 9.4

cpe:2.3:a:facelessuser:pymdown_extensions:9.4
Facelessuser » Pymdown Extensions » Version: 9.5

cpe:2.3:a:facelessuser:pymdown_extensions:9.5
Facelessuser » Pymdown Extensions » Version: 9.6

cpe:2.3:a:facelessuser:pymdown_extensions:9.6
Facelessuser » Pymdown Extensions » Version: 9.7

cpe:2.3:a:facelessuser:pymdown_extensions:9.7
Facelessuser » Pymdown Extensions » Version: 9.8

cpe:2.3:a:facelessuser:pymdown_extensions:9.8
Facelessuser » Pymdown Extensions » Version: 9.9

cpe:2.3:a:facelessuser:pymdown_extensions:9.9
Facelessuser » Pymdown Extensions » Version: 9.9.1

cpe:2.3:a:facelessuser:pymdown_extensions:9.9.1
Facelessuser » Pymdown Extensions » Version: 9.9.2

cpe:2.3:a:facelessuser:pymdown_extensions:9.9.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-68142

Products

Pricing

Contact Us