Threats tagged 'brew-mcp-atlassian-cve-2026-46338'

A regression vulnerability in pymdownx.snippets allows a path traversal bypass when restrict_base_path is enabled. The flawed check uses a string prefix match instead of a directory boundary check, enabling reading files from sibling directories with similar path prefixes. This affects versions from 10.0.1 through 10.21.2. The vulnerability permits arbitrary file reads within the host filesystem under certain path conditions, potentially exposing sensitive files during markdown processing in build pipelines.