Critical Security Update for python-markdown and python3-markdown: CVE-2025-69534
Summary
RHSA-2026:19366: Red Hat Security Advisory: python-markdown security update. Affects python-markdown versions < 0:3.3.4-4.el9_8.2. Fixed in 0:3.3.4-4.el9_8.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
python-markdown is a popular library in Python used for converting Markdown text to HTML. It is widely utilized in web applications and content management systems due to its simplicity and effectiveness. The library allows developers to easily integrate Markdown support into their applications. However, a recently discovered vulnerability has raised concerns about its security, necessitating immediate attention from users and developers alike.
Vulnerability Detail
The vulnerability identified as CVE-2025-69534 affects both python-markdown and python3-markdown packages. This issue arises from improper handling of certain inputs, which could lead to potential denial of service (DoS) attacks. Attackers may exploit this vulnerability to crash the application or cause it to behave unexpectedly, resulting in service interruptions. The CVSS score for this vulnerability is 8.2, indicating a high severity level that requires prompt remediation.
How To Fix
Minimum fixed version
0:3.3.4-4.el9_8.2
This is the first release that contains the fix.
sudo dnf update python-markdownTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate updating is not feasible, consider implementing input validation to sanitize user inputs before processing them with the markdown libraries. This can help mitigate the risk of exploitation until the package is updated.
Conclusion
The python-markdown and python3-markdown packages have a critical vulnerability (CVE-2025-69534) that could lead to denial of service attacks. It is essential for users to update to the patched version (0:3.3.4-4.el9_8.2) to ensure the security of their applications. Implementing input validation can serve as a temporary workaround until the update is applied.
See every vulnerability recorded for python-markdown →
FAQ
CVE-2025-69534 is a security vulnerability affecting the python-markdown and python3-markdown packages, which could lead to denial of service attacks.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
Implement input validation to sanitize user inputs as a temporary workaround until you can update the package.
The CVSS score for this vulnerability is 8.2, indicating a high severity level that requires immediate attention.
You can find detailed information about this vulnerability in the Red Hat Security Advisory at https://security.access.redhat.com/data/osv/RHSA-2026:19366.json.
Related vulnerabilities
Recent vulnerabilities recorded for python-markdown.
