PT-2025-17965 · Unknown · Python-Markdownify

·

CVE-2025-46656

·

Published

2025-04-26

·

Updated

2026-07-07

CVSS v3.1

3.3

Low

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions python-markdownify (aka markdownify) versions prior to 0.14.1
Description The issue allows large headline prefixes, such as , in addition to the standard

through

tags. This can cause excessive memory consumption.
Recommendations For versions prior to 0.14.1, update to version 0.14.1 or later to resolve the issue. As a temporary workaround, consider restricting the use of large headline prefixes to minimize the risk of excessive memory consumption.

Exploit

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-46656
GHSA-7MPR-5M44-H73R
PYSEC-2026-1604

Affected Products

Python-Markdownify