CVE-2025-69534

Name of the Vulnerable Software and Affected Versions Python-Markdown versions prior to 3.8.1

Description A flaw exists in Python-Markdown version 3.8 where improperly formed HTML-like sequences can trigger an unhandled AssertionError within the html.parser.HTMLParser during Markdown processing. Because Python-Markdown does not handle this exception, applications processing attacker-controlled Markdown may experience crashes. This can lead to a remote, unauthenticated Denial of Service in various systems, including web applications, documentation systems, and CI/CD pipelines that render untrusted Markdown. The issue may also result in Information Disclosure through uncaught exceptions.

Recommendations Update to Python-Markdown version 3.8.1 or later.