Lucene search
+L

7 matches found

OSV
OSV
added 2025/05/29 6:31 a.m.13 views

GHSA-22V8-P7H2-RJ7P Markdownify MCP Server allows attackers to read arbitrary files

All versions of the package mcp-markdownify-server are vulnerable to Files or Directories Accessible to External Parties via the get-markdown-file tool. An attacker can craft a prompt that, once accessed by the MCP host, will allow it to read arbitrary files from the host running the server...

8.2CVSS7AI score0.00385EPSS
SaveExploits0References5
Rows per page
Query Builder