CVE-2019-25781

A flaw was found in Python-Markdown. An algorithmic complexity vulnerability in inline link parsing allows a remote attacker to cause a Denial of Service DoS by exhausting CPU resources. By submitting specially crafted Markdown text containing repeated unmatched brackets, an attacker can force th...

Linux Distros Unpatched Vulnerability : CVE-2019-25781

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerability in inline link parsing that allows remote attackers to exhaust CPU through...

CVE-2019-25781

Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerability in inline link parsing that allows remote attackers to exhaust CPU through unmatched brackets. Attackers can submit short Markdown containing repeated or ! characters, forcing LinkInlineProcessor.getText and getLi...

CVE-2019-25781

The Python-Markdown library (versions 3.0 through 3.11.2 ) is vulnerable to a Denial of Service (DoS) condition due to an algorithmic complexity vulnerability in inline link parsing. An attacker can exhaust CPU resources by submitting short Markdown strings containing repeated [ or ![ characters....

CVE-2019-25781 Python-Markdown 3.0 through 3.11.2 Denial of Service via Link Bracket Parsing

Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerability in inline link parsing that allows remote attackers to exhaust CPU through unmatched brackets. Attackers can submit short Markdown containing repeated or ! characters, forcing LinkInlineProcessor.getText and getLi...

EUVD-2019-20211

Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerability in inline link parsing that allows remote attackers to exhaust CPU through unmatched brackets. Attackers can submit short Markdown containing repeated or ! characters, forcing LinkInlineProcessor.getText and getLi...

CVE-2019-25781: Python-Markdown Markdown: Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerability in inline link parsing that allows…

Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerability in inline link parsing that allows remote attackers to exhaust CPU through unmatched brackets. Attackers can submit short Markdown containing repeated or ! characters, forcing LinkInlineProcessor.getText and getLi...

PT-2026-132110

Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerability in inline link parsing that allows remote attackers to exhaust CPU through unmatched brackets. Attackers can submit short Markdown containing repeated or ! characters, forcing LinkInlineProcessor.getText and getLi...

Mercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTML

Summary Mercury turns Jupyter notebooks into shared web apps/dashboards. The mr.Markdown widget converts its input to HTML with python-markdown and no sanitization step. MarkdownWidget is an ipywidgets.HTML widget, whose value is written to the page as raw HTML via innerHTML with no sanitization,...

Astra Linux – Vulnerabilities in Python 2.7, Python 3.11, Python 3.7

Python-Markdown version 3.8 contains a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown parsing. Since Python-Markdown does not catch this exception, any application that processes Markdown controlled by...

Rocky Linux 9 [CIQ] Security Update: python3-markdown (crlsa-2026_19366)

The Rocky Linux 9 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-202619366 advisory. python-markdown: denial of service via malformed HTML-like sequences CVE-2025-69534 Tenable has extracted the preceding description block directly from the CIQ...

K000163420: Python-Markdown vulnerability CVE-2025-69534

Security Advisory Description Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown parsing. Because Python-Markdown does not catch this exception, any application that processe...

Security Bulletin: IBM Cognos Analytics 12.0.4 and 12.1.3 versions are affected by security vulnerabilities

Summary There are vulnerabilities identified in Cognos Analytics application and its open source components. These vulnerabilties has been resolved and the remediation versions is provided below. Vulnerability Details CVEID:CVE-2024-56344 DESCRIPTION: IBM Cognos Analytics could allow a remote...

Linux Distros Unpatched Vulnerability : CVE-2026-76098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mistune is a Python Markdown parser with renderers and plugins. Versions 3.3.0 through 3.3.2 are vulnerable to DoS through deeply nested tokens. HTML rendering...

CVE-2026-76098

Mistune is a Python Markdown parser with renderers and plugins. Versions 3.3.0 through 3.3.2 are vulnerable to DoS through deeply nested tokens. HTML rendering creates deeply nested emphasis tokens from consecutive asterisk characters, and recursive rendering in HTMLRenderer.rendertoken can excee...

CVE-2026-76098

Mistune is a Python Markdown parser with renderers and plugins. Versions 3.3.0 through 3.3.2 are vulnerable to DoS through deeply nested tokens. HTML rendering creates deeply nested emphasis tokens from consecutive asterisk characters, and recursive rendering in HTMLRenderer.rendertoken can excee...

CVE-2026-76098 Mistune has Denial of Service — RecursionError via Excessive Emphasis Markers in Markdown

Mistune is a Python Markdown parser with renderers and plugins. Versions 3.3.0 through 3.3.2 are vulnerable to DoS through deeply nested tokens. HTML rendering creates deeply nested emphasis tokens from consecutive asterisk characters, and recursive rendering in HTMLRenderer.rendertoken can excee...

CVE-2026-61632

PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. In versions up to and including 10.21.3, the b64 extension is vulnerable to a path traversal that discloses arbitrary files: it inlines images referenced by by joining the src onto the configured basepath with...

CVE-2026-61632

CVE-2026-61632 affects PyMdown Extensions (b64 extension) up to version 10.21.3. The b64 code path in pymdownx/b64.py joins the attacker-controlled image src onto a configured base_path (or uses an absolute path) and opens the result without ensuring the resolved path stays inside base_path, allo...

CVE-2026-61632: Improper Limitation of a Pathname to a Restricted Directory

PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. In versions up to and including 10.21.3, the b64 extension is vulnerable to a path traversal that discloses arbitrary files: it inlines images referenced by by joining the src onto the configured basepath with...