Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Python Markdown Vulnerability in Red Hat Systems

published 5 months ago

Summary

A security update is available for Python Markdown in Red Hat systems, which could allow an attacker to execute arbitrary code. This affects systems using Python Markdown for rendering text. To protect your system, apply the latest security update as soon as possible.

What to do

Update redhat python-markdown to version 0:3.3.4-4.el9_6.2.
Update redhat python3-markdown to version 0:3.3.4-4.el9_6.2.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_eus:9.6::baseos	redhat	python-markdown	< 0:3.3.4-4.el9_6.2 Fix: upgrade to 0:3.3.4-4.el9_6.2
Red Hat:rhel_eus:9.6::baseos	redhat	python3-markdown	< 0:3.3.4-4.el9_6.2 Fix: upgrade to 0:3.3.4-4.el9_6.2

Original advisory text

Red Hat Security Advisory: python-markdown security update

References

https://access.redhat.com/errata/RHSA-2026:20676 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2444839 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20676.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-69534 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-69534 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-69534 Vendor Advisory
https://github.com/Python-Markdown/markdown Third Party Advisory
https://github.com/Python-Markdown/markdown/actions/runs/15736122892 Third Party Advisory
https://github.com/Python-Markdown/markdown/issues/1534 Third Party Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

8.2 High

Timeline

Published26 May 2026

Updated26 May 2026

First seen26 May 2026

Sources

RHSA-2026:20676 · OSV

Track software like this

Free during beta