Markdownify
1 CVEs
product
Monthly
python-markdownify (aka markdownify) before 0.14.1 allows large headline prefixes such as <h9999999> in addition to <h1> through <h6>. Rated low severity (CVSS 2.9), this vulnerability is no authentication required. Public exploit code available.
Python
Information Disclosure
Markdownify
NVD
GitHub
CVSS 3.1
2.9
EPSS
0.1%
CVE-2025-46656
EPSS 0%
CVSS 2.9
LOW
POC
PATCH
Monitor
python-markdownify (aka markdownify) before 0.14.1 allows large headline prefixes such as <h9999999> in addition to <h1> through <h6>. Rated low severity (CVSS 2.9), this vulnerability is no authentication required. Public exploit code available.
Python
Information Disclosure
Markdownify
NVD
GitHub