F
Vendor security profile
facelessuser
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs7
Critical0
CISA KEV0
Public exploit7
Patch rate%57
Avg. CVSS6.1
12-month vulnerability rate
0
0
0
0
0
0
0
0
3
2
2
0
CVE KEV
CVE severity distribution
7toplam CVE
High3 (43%)
Medium4 (57%)
Patch and exploitation view
%57
Verified patch
%0
CISA KEV
%100
Public exploit
4Patch available
0Partial
0Workaround
0Vendor: no patch
3Unknown
Latest vulnerabilities
5.3
CVE-2026-85999
Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace/comment trimming regex `RE_WS_END` (triggers on VALID selectors)
F
Patch status unknownEPSS %1
5.3
CVE-2026-86000
Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patterns
F
Patch status unknownEPSS %1
5.3
CVE-2026-61632
PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path
F
Patch status unknownEPSS %0
7.5
CVE-2026-67422
pymdown-extensions: Exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors
F
Patch verifiedEPSS %1
4.3
CVE-2026-46338
Path traversal in Facelessuser Pymdown Extensions
F
Patch verifiedEPSS %0
7.5
CVE-2026-49477
Uncontrolled resource consumption in Facelessuser Soup Sieve
F
Patch verifiedEPSS %1
7.5
CVE-2026-49476
Uncontrolled resource consumption in Facelessuser Soup Sieve
F
Patch verifiedEPSS %1