CVE-2025-69534

EUVD-2025-208312

05.03.2026, 15:16

Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown parsing. Because Python-Markdown does not catch this exception, any application that processes attacker-controlled Markdown may crash. This enables remote, unauthenticated Denial of Service in web applications, documentation systems, CI/CD pipelines, and any service that renders untrusted Markdown. The issue was acknowledged by the vendor and fixed in version 3.8.1. This issue causes a remote Denial of Service in any application parsing untrusted Markdown, and can lead to Information Disclosure through uncaught exceptions.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 43%

Affected Products (NVD)

Vendor	Product	Version
python-markdown	markdown	3.8

𝑥

= Vulnerable software versions

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources.

Vendor	Product	Version	Source
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	0:3.10.2-1.el8ap ≤ 𝑥 < *	ADP
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	0:3.10.2-1.el9ap ≤ 𝑥 < *	ADP
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 9	0:4.7.11-2.el9ap ≤ 𝑥 < *	ADP
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 9	0:3.10.2-1.el9ap ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 10	0:3.5.1-6.el10_2.1 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	0:3.5.1-6.el10_0.1 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9	0:3.3.4-4.el9_8.2 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	0:3.3.4-4.el9_4.2 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	0:3.3.4-4.el9_6.2 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Satellite 6.16 for RHEL 8	0:3.8.2-1.el8pc ≤ 𝑥 < *	ADP
Red Hat	Red Hat Satellite 6.16 for RHEL 9	0:3.8.2-1.el9pc ≤ 𝑥 < *	ADP
Red Hat	Red Hat Satellite 6.17 for RHEL 9	0:3.8.2-1.el9pc ≤ 𝑥 < *	ADP
Red Hat	Red Hat Satellite 6.18 for RHEL 9	0:3.8.2-1.el9pc ≤ 𝑥 < *	ADP
Red Hat	Red Hat Developer Hub 1.8	1776784286 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Developer Hub 1.9	1777903262 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift AI 2.25	1776768939 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift AI 2.25	1776243287 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift AI 2.25	1776272253 ≤ 𝑥 < *	ADP