7 matches found
GHSA-22V8-P7H2-RJ7P Markdownify MCP Server allows attackers to read arbitrary files
All versions of the package mcp-markdownify-server are vulnerable to Files or Directories Accessible to External Parties via the get-markdown-file tool. An attacker can craft a prompt that, once accessed by the MCP host, will allow it to read arbitrary files from the host running the server...
8.2CVSS7AI score0.00385EPSS
SaveExploits0References5
20