python-markdown: denial of service via malformed HTML-like sequences

🗓️ 19 May 2026 22:12:27Reported by RedHatType

Python-Markdown denial of service via malformed Hypertext Markup Language sequences causing an unhandled assertion error and possible stack trace disclosure.

Reporter	Title	Published	Views	Family All 102
ATTACKERKB	CVE-2025-69534	5 Mar 202600:00	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : python3-markdown (ALAS2023-2026-1492)	30 Mar 202600:00	–	nessus
Tenable Nessus	AlmaLinux 9 : python-markdown (ALSA-2026:19366)	7 Jul 202600:00	–	nessus
Tenable Nessus	CentOS 9 : python-markdown-3.3.4-5.el9	13 May 202600:00	–	nessus
Tenable Nessus	MiracleLinux 9 : python-markdown-3.3.4-4.el9_8.2 (AXSA:2026-1228:01)	9 Jul 202600:00	–	nessus
Tenable Nessus	Oracle Linux 9 : python-markdown (ELSA-2026-19366)	24 Jun 202600:00	–	nessus
Tenable Nessus	RHEL 10 / 9 : Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update (Important) (RHSA-2026:13508)	4 May 202600:00	–	nessus
Tenable Nessus	RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update (Important) (RHSA-2026:13512)	4 May 202600:00	–	nessus
Tenable Nessus	RHEL 9 : Satellite 6.18.5 Async Update (Important) (RHSA-2026:14835)	7 May 202600:00	–	nessus
Tenable Nessus	RHEL 9 : Satellite 6.17.8 Async Update (Important) (RHSA-2026:14873)	7 May 202600:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	9.8	noarch	python3-markdown	3.3.4-4.el9_8.2	python3-markdown-3.3.4-4.el9_8.2.noarch.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2025-69534
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/Python-Markdown/markdown
github	www.github.com/Python-Markdown/markdown/actions/runs/15736122892
github	www.github.com/Python-Markdown/markdown/issues/1534
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-69534
cve	www.cve.org/CVERecord

30 Jun 2026 06:05Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.5 - 8.2

EPSS0.00566

SSVC

CWE-617