~ / search / GHSA-7mpr-5m44-h73r

GHSA-7mpr-5m44-h73r

markdownify allows large headline prefixes such as <h9999999>, which causes memory consumption

Source: GitHub Advisory Database (reviewed) Low CVE-2025-46656

Packages

EcosystemPackageAffectedFixed in
PyPI markdownify < 0.14.1 0.14.1

Details

As written in the advisory (Markdown source, shown as plain text).

python-markdownify (aka markdownify) before 0.14.1 allows large headline prefixes such as <h9999999> in addition to <h1> through <h6>. This causes memory consumption.

References

External links from the advisory. They lead to third-party sites.