Search for packages
| purl | pkg:pypi/markdown@3.8.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-gar7-7upf-d7cz | Python-Markdown has an Uncaught Exception Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown parsing. Because Python-Markdown does not catch this exception, any application that processes attacker-controlled Markdown may crash. This enables remote, unauthenticated Denial of Service in web applications, documentation systems, CI/CD pipelines, and any service that renders untrusted Markdown. The issue was acknowledged by the vendor and fixed in version 3.8.1. This issue causes a remote Denial of Service in any application parsing untrusted Markdown, and can lead to Information Disclosure through uncaught exceptions. |
CVE-2025-69534
GHSA-5wmx-573v-2qwq |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-17T00:31:00.293881+00:00 | GitLab Importer | Fixing | VCID-gar7-7upf-d7cz | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Markdown/CVE-2025-69534.yml | 38.4.0 |
| 2026-04-12T01:55:44.571721+00:00 | GitLab Importer | Fixing | VCID-gar7-7upf-d7cz | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Markdown/CVE-2025-69534.yml | 38.3.0 |
| 2026-04-06T06:40:23.585580+00:00 | GitLab Importer | Fixing | VCID-gar7-7upf-d7cz | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Markdown/CVE-2025-69534.yml | 38.1.0 |
| 2026-04-01T16:08:23.059866+00:00 | GHSA Importer | Fixing | VCID-gar7-7upf-d7cz | https://github.com/advisories/GHSA-5wmx-573v-2qwq | 38.0.0 |
| 2026-04-01T12:54:02.337954+00:00 | GithubOSV Importer | Fixing | VCID-gar7-7upf-d7cz | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-5wmx-573v-2qwq/GHSA-5wmx-573v-2qwq.json | 38.0.0 |