pypi package report

Is markdownify safe?

1 known vulnerability, worst severity LOW.

cvss
2.9

how bad it is if exploited, out of 10

epss
0.20%

chance of exploitation in the next 30 days

xyz score
2.2

CyberXYZ composite, out of 10

fig. 01 — GHSA-7mpr-5m44-h73r, the advisory selected below

// advisories

GHSA-7mpr-5m44-h73r

LOWCVE-2025-46656

python-markdownify (aka markdownify) before 0.14.1 allows large headline prefixes such as <h9999999> in addition to <h1> through <h6>. This causes memory consumption.

Affected
< 0.14.1
Fixed in
0.14.1
Published
2025-04-27
Source
github

GHSANVDMITREreferencereferencereference


// ai model usage

No published models are known to use this package.


Checked 2026-09-22 at 02:35 UTC. The most recent advisory here was published 2025-04-27. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Think a verdict here is wrong? Tell us — we respond within 2 business days.
Is markdownify safe? pypi package security report | CyberXYZ