run-llama / llama-agents / 42178137653
85%

DEFAULT BRANCH: main
Ran
Jobs 12
Files 235
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 85.168% (-0.005%) from 85.173%
42178137653

push

github

web-flow 
Update dependency pymdown-extensions to v11 [SECURITY] (#877)

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[pymdown-extensions](https://redirect.github.com/facelessuser/pymdown-extensions)
| `10.21.3` → `11.0.1` |
![age](https://developer.mend.io/api/mc/badges/age/pypi/pymdown-extensions/11.0.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/pymdown-extensions/10.21.3/11.0.1?slim=true)
|

---

### PyMdown Extensions: Path traversal in the b64 extension lets <img
src> read files outside base_path
[CVE-2026-61632](https://nvd.nist.gov/vuln/detail/CVE-2026-61632) /
[GHSA-9xwg-3r6f-jcx2](https://redirect.github.com/advisories/GHSA-9xwg-3r6f-jcx2)

<details>
<summary>More information</summary>

#### Details
##### Summary

The `b64` extension inlines images referenced by `<img src="...">` as
base64 data URIs. When resolving the `src` path it joins it onto the
configured `base_path` with `os.path.normpath` and opens the result
directly, with no check that the resolved path stays inside `base_path`.
A `src` containing `../` sequences, or an absolute path, therefore reads
a file outside `base_path` as long as that file has an allowed image
extension (`.png`, `.jpg`, `.jpeg`, `.gif`, `.svg`). The base64 of that
file is then embedded in the rendered output, disclosing its contents.

This is a separate code path from the `snippets` traversal issues
(GHSA-jh85-wwv9-24hv, GHSA-62q4-447f-wv8h). It lives in
`pymdownx/b64.py` and has no path restriction of any kind. Confirmed on
`10.21.3` installed from PyPI.

##### Details

In `pymdownx/b64.py`, function `repl_path` (around lines 68 to 90 on
`main`):

```python
if is_absolute:
    file_name = os.path.normpath(path)                          # absolute src: base_path ignored entirely
else:
    file_name = os.path.normpath(os.path.... (continued)

18961 of 22263 relevant lines covered (85.17%)

1.15 hits per line

Coverage Regressions

Lines Coverage ∆ File
1
94.16
-0.73% packages/llama-agents-server/src/llama_agents/server/_runtime/idle_release_runtime.py
Jobs
ID Job ID Ran Files Coverage
1 llama-agents-integration-tests - 42178137653.1 102
64.89
GitHub Action Run
2 llama-agents-control-plane - 42178137653.2 31
74.57
GitHub Action Run
3 llama-agents-server - 42178137653.3 31
86.12
GitHub Action Run
4 llama-agents-client - 42178137653.4 4
95.32
GitHub Action Run
5 llama-agents-appserver - 42178137653.5 17
81.96
GitHub Action Run
6 llama-agents-core - 42178137653.6 15
81.34
GitHub Action Run
7 llama-agents-agentcore - 42178137653.7 5
70.22
GitHub Action Run
8 llama-index-utils-workflow - 42178137653.8 1
70.84
GitHub Action Run
9 llama-agents-dbos - 42178137653.9 11
75.72
GitHub Action Run
10 llamactl - 42178137653.10 48
79.79
GitHub Action Run
11 llama-agents-dev - 42178137653.11 12
76.5
GitHub Action Run
12 llama-index-workflows - 42178137653.12 53
94.18
GitHub Action Run
Source Files on build 42178137653