CVE-2026-14699

creationtimestamp| type| source ---|---|--- 2026-07-05 10:26:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpvef62il722...

CVE-2026-14699 zcaceres markdownify-mcp Markdownify.ts assertPathAllowed symlink

A weakness has been identified in zcaceres markdownify-mcp up to 1.1.0. The affected element is the function assertPathAllowed of the file src/Markdownify.ts. Executing a manipulation can lead to symlink following. The attack can only be executed locally. The pull request to fix this issue awaits...