Critical Security Update for python-markdown and python3-markdown: CVE-2025-69534
Summary
RHSA-2026:19155: Red Hat Security Advisory: python-markdown security update. Affects python-markdown versions < 0:3.5.1-6.el10_2.1. Fixed in 0:3.5.1-6.el10_2.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
python-markdown is a widely used library in Python for converting Markdown text to HTML. It is known for its simplicity and extensibility, allowing developers to easily integrate Markdown processing into their applications. The library is essential for applications that require rich text formatting. However, a recent security vulnerability has been identified that could potentially expose applications using this library to security risks.
Vulnerability Detail
The vulnerability identified as CVE-2025-69534 affects both python-markdown and python3-markdown packages. This issue arises from improper handling of certain inputs, which could allow an attacker to exploit the library, leading to potential denial of service or other security breaches. The CVSS score for this vulnerability is 8.2, indicating a high severity level. If left unaddressed, this vulnerability could compromise the integrity and availability of applications relying on these libraries.
How To Fix
Minimum fixed version
0:3.5.1-6.el10_2.1
This is the first release that contains the fix.
sudo dnf update python-markdownTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds available for this vulnerability other than applying the patch. It is advisable to monitor the application for any unusual behavior until the update can be applied.
Conclusion
The python-markdown and python3-markdown libraries have a critical vulnerability that needs to be addressed promptly. Updating to the latest patched version is essential to maintain the security and integrity of applications using these libraries. Regular monitoring and utilizing tools like Vulert can help in identifying and mitigating such vulnerabilities.
See every vulnerability recorded for python-markdown →
FAQ
CVE-2025-69534 is a security vulnerability affecting the python-markdown and python3-markdown libraries, which could lead to denial of service or other security issues.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score for this vulnerability is 8.2, indicating a high severity level that requires immediate attention.
If you cannot update the package immediately, it is crucial to monitor your application for any unusual behavior and consider implementing additional security measures.
More information can be found in the Red Hat Security Advisory at https://security.access.redhat.com/data/osv/RHSA-2026:19155.json.
Related vulnerabilities
Recent vulnerabilities recorded for python-markdown.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
