markdownify allows large headline prefixes such as <h9999999>, which causes memory consumption

python-markdownify aka markdownify before 0.14.1 allows large headline prefixes such as in addition to through . This causes memory consumption...

GHSA-7MPR-5M44-H73R markdownify allows large headline prefixes such as <h9999999>, which causes memory consumption

python-markdownify aka markdownify before 0.14.1 allows large headline prefixes such as in addition to through . This causes memory consumption...

CVE-2025-46656

python-markdownify aka markdownify before 0.14.1 allows large headline prefixes such as in addition to through . This causes memory consumption...

Allocation of Resources Without Limits or Throttling

Overview markdownify is a Convert HTML to markdown. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling when processing malformed HTML tags. An attacker can cause excessive memory consumption by causing heading tags with very large values to be...

CVE-2025-46656

CVE-2025-46656 affects python-markdownify (markdownify) prior to 0.14.1. The flaw allows oversized heading prefixes (e.g., ) which can trigger excessive memory consumption when processing HTML to Markdown. Impact is Low (availability impact listed as Low in CVSS data; local attack vector with low...

CVE-2025-46656: Improper Validation of Specified Quantity in Input

python-markdownify aka markdownify before 0.14.1 allows large headline prefixes such as in addition to through . This causes memory consumption...

python-markdownify 安全漏洞

python-markdownify is a tool for converting HTML to Markdown by Matthew Dapena-Tretter, an individual developer. A security vulnerability exists in python-markdownify versions prior to 0.14.1, which stems from support for oversized title prefixes, which may lead to memory consumption...

CVE-2025-46656

python-markdownify aka markdownify before 0.14.1 allows large headline prefixes such as in addition to through . This causes memory consumption...

PT-2025-17965

Name of the Vulnerable Software and Affected Versions python-markdownify aka markdownify versions prior to 0.14.1 Description The issue allows large headline prefixes, such as , in addition to the standard through tags. This can cause excessive memory consumption. Recommendations For versions pri...

CVE-2025-46656

python-markdownify aka markdownify before 0.14.1 allows large headline prefixes such as in addition to through . This causes memory consumption...

CVE-2025-46656

python-markdownify aka markdownify before 0.14.1 allows large headline prefixes such as in addition to through . This causes memory consumption...

Information Disclosure

electron-markdownify is vulnerable to information disclosure. An attacker is able to gain access to confidential information through local arbitrary file reads, because the application does not have a proper CSP policy and/or does not properly validate the contents of markdown files before...

Markdownify has Files or Directories Accessible to External Parties

Markdownify version 1.4.1 allows an external attacker to remotely obtain arbitrary local files on any client that attempts to view a malicious markdown file through Markdownify. This is possible because the application does not have a CSP policy or at least not strict enough and/or does not...

GHSA-QQHF-XFHW-7884 Markdownify has Files or Directories Accessible to External Parties

Markdownify version 1.4.1 allows an external attacker to remotely obtain arbitrary local files on any client that attempts to view a malicious markdown file through Markdownify. This is possible because the application does not have a CSP policy or at least not strict enough and/or does not...

CVE-2022-41710

Markdownify version 1.4.1 allows an external attacker to remotely obtain arbitrary local files on any client that attempts to view a malicious markdown file through Markdownify. This is possible because the application does not have a CSP policy or at least not strict enough and/or does not...

Markdownify 安全漏洞

Markdownify is a minimal Markdown Editor desktop application built on Electron by the individual developer Amit Merchant. A security vulnerability exists in Markdownify version 1.4.1 that stems from the application not having a CSP policy to properly validate markdown files before rendering their...

CVE-2022-41710: Files or Directories Accessible to External Parties

Markdownify version 1.4.1 allows an external attacker to remotely obtain arbitrary local files on any client that attempts to view a malicious markdown file through Markdownify. This is possible because the application does not have a CSP policy or at least not strict enough and/or does not...

PT-2022-26040 · Unknown · Markdownify

Name of the Vulnerable Software and Affected Versions: Markdownify version 1.4.1 Description: The issue allows an external attacker to remotely obtain arbitrary local files on any client that attempts to view a malicious markdown file through Markdownify. This is possible because the application...

CVE-2022-41710

Markdownify version 1.4.1 allows an external attacker to remotely obtain arbitrary local files on any client that attempts to view a malicious markdown file through Markdownify. This is possible because the application does not have a CSP policy or at least not strict enough and/or does not...

CVE-2022-41710

Markdownify 1.4.1 is vulnerable to information disclosure: when a client renders a malicious markdown file, an external attacker can read arbitrary local files. The root cause cited across multiple connected sources is an inadequate security posture for rendering content—specifically, the lack of...