IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-03-05 15:16

MODIFIED

2026-03-05 15:16

EPSS (Prob. Exploit)

0.60%

Top 51.8%

DATA SOURCES:

NVD 🔗 2026-03-05 RED HAT 🔗 2026-03-08 FIRST EPSS 🔗 2026-10-25 GITHUB 🔗 2026-10-28

> DESCRIPTION

Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown parsing. Because Python-Markdown does not catch this exception, any application that processes attacker-controlled Markdown may crash. This enables remote, unauthenticated Denial of Service in web applications, documentation systems, CI/CD pipelines, and any service that renders untrusted Markdown. The issue was acknowledged by the vendor and fixed in version 3.8.1. This issue causes a remote Denial of Service in any application parsing untrusted Markdown, and can lead to Information Disclosure through uncaught exceptions.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> RED HAT SECURITY ADVISORIES

RHSA-2026:9742 CRITICAL

Red Hat Security Advisory: Red Hat Developer Hub 1.8.6 release.

Red Hat Developer Hub 1.8.6 has been released.

RHSA-2026:10184 IMPORTANT

Red Hat Security Advisory: RHOAI 2.25.5 - Red Hat OpenShift AI

Updated images are now available for Red Hat OpenShift AI.

RHSA-2026:13508 IMPORTANT

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.6 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (...

RHSA-2026:13512 IMPORTANT

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (...

RHSA-2026:13826 CRITICAL

Red Hat Security Advisory: Red Hat Developer Hub 1.9.4 release.

Red Hat Developer Hub 1.9.4 has been released.

RHSA-2026:14874 IMPORTANT

Red Hat Security Advisory: Satellite 6.16.8 Async Update

An update is now available for Red Hat Satellite 6.16 for RHEL 8 and RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Sy...

RHSA-2026:14835 IMPORTANT

Red Hat Security Advisory: Satellite 6.18.5 Async Update

A new release is now available for Red Hat Satellite 6.18 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (C...

RHSA-2026:14873 IMPORTANT

Red Hat Security Advisory: Satellite 6.17.8 Async Update

A new release is now available for Red Hat Satellite 6.17 for RHEL 9.

RHSA-2026:19155 IMPORTANT

Red Hat Security Advisory: python-markdown security update

An update for python-markdown is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

RHSA-2026:19366 IMPORTANT

Red Hat Security Advisory: python-markdown security update

An update for python-markdown is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

RHSA-2026:20676 IMPORTANT

Red Hat Security Advisory: python-markdown security update

An update for python-markdown is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Com...

RHSA-2026:20674 IMPORTANT

Red Hat Security Advisory: python-markdown security update

An update for python-markdown is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Import...

RHSA-2026:20677 IMPORTANT

Red Hat Security Advisory: python-markdown security update

An update for python-markdown is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Co...

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY

Important

> GITHUB SECURITY ADVISORY

GHSA-5wmx-573v-2qwq MODERATE

Python-Markdown has an Uncaught Exception

AFFECTED PACKAGES:

PIP / Markdown

< 3.8.1

Fixed in: 3.8.1

> HISTORIQUE DES MODIFICATIONS

Première apparition

05/03/2026 15:16

Source: NVD

📊 ENRICHISSEMENT 08/03/2026 05:01

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 06/03/2026 23:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 06/03/2026 22:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 06/03/2026 21:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 06/03/2026 20:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 06/03/2026 19:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 06/03/2026 18:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 06/03/2026 17:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 06/03/2026 16:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 06/03/2026 15:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 06/03/2026 14:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 06/03/2026 13:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 06/03/2026 12:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 06/03/2026 11:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 06/03/2026 10:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 06/03/2026 09:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 06/03/2026 08:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 06/03/2026 07:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 06/03/2026 06:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 06/03/2026 05:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 06/03/2026 04:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 06/03/2026 03:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 06/03/2026 02:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 06/03/2026 01:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 06/03/2026 00:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

N/A

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 06/03/2026 00:30

REDHAT

Champ modifié: Red Hat

Ancienne valeur:

Non

Nouvelle valeur:

Oui

Total des modifications: 26 Dernière mise à jour: 8 months ago

> REFERENCES

https://github.com/Python-Markdown/markdown

https://github.com/Python-Markdown/markdown/actions/runs/15736122892

https://github.com/Python-Markdown/markdown/issues/1534

« BACK_TO_HOME

> CVE-2025-69534

> DESCRIPTION

> AFFECTED_PRODUCTS

> RED HAT SECURITY ADVISORIES

> RED HAT SEVERITY ASSESSMENT

> GITHUB SECURITY ADVISORY

> HISTORIQUE DES MODIFICATIONS

> REFERENCES