CVE-2025-46656
CVE-2025-46656
This page contains facts from public vulnerability sources. Check the original advisory before updating.
python-markdownify (aka markdownify) before 0.14.1 allows large headline prefixes such as <h9999999> in addition to <h1> through <h6>. This causes memory consumption.
CVSS 2.9 · Low · EPSS 0.2% · Fix available
- Published
- Updated
Stack: python
Affected products and versions
python-markdownify
- Versions
- ≥ 0, < 0.14.1: Affected (semver)
Update to 0.14.1
markdownify PyPI
- Versions
- 0.10.0
- 0.10.1
- 0.10.2
- 0.10.3
- 0.11.0
- 0.11.1
- 0.11.2
- 0.11.4
- 0.11.5
- 0.11.6
- 0.12.1
- 0.13.0
- 0.13.1
- 0.14.0
- 0.2.0
- 0.3.0
- 0.4.0
- 0.4.1
- 0.5.1
- 0.5.2
- 0.5.3
- 0.6.0
- 0.6.1
- 0.6.3
- 0.6.4
- 0.6.5
- 0.6.6
- 0.7.0
- 0.7.1
- 0.7.2
- 0.7.3
- 0.7.4
- 0.8.0
- 0.8.1
- 0.9.0
- 0.9.2
- 0.9.3
- 0.9.4
- Affected ranges
- ECOSYSTEM: < 0.14.1
Update to 0.14.1