Skip to content
OpenAdvisories
Low · 2.9 CVE-2025-46656 EUVD-2025-12476GHSA-7mpr-5m44-h73rPYSEC-2026-1604

markdownify allows large headline prefixes such as <h9999999>, which causes memory consumption

Published Apr 26, 2025 · Updated Apr 29, 2025 · Assigned by mitre

Description

python-markdownify (aka markdownify) before 0.14.1 allows large headline prefixes such as <h9999999> in addition to <h1> through <h6>. This causes memory consumption.

Affected products

VendorProductAffectedFixed
python-markdownify python-markdownify < 0.14.1 0.14.1

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI markdownify < 0.14.1 0.14.1 GHSA-7mpr-5m44-h73r

References