Lucene search
K

14 matches found

OSV
OSV
added 2026/04/28 12:31 a.m.0 views

GHSA-WFR3-HF93-QGG3 mkdocs-mcp-plugin has a Path Traversal issue

A vulnerability was found in douinc mkdocs-mcp-plugin up to 0.4.1. This affects the function readdocument/listdocuments of the file server.py. Performing a manipulation of the argument docsdir/filepath results in path traversal. The attack is possible to be carried out remotely. The exploit has...

7.3CVSS6.7AI score0.00099EPSS
Exploits0References7
Github Security Blog
Github Security Blog
added 2026/04/28 12:31 a.m.3 views

mkdocs-mcp-plugin has a Path Traversal issue

A vulnerability was found in douinc mkdocs-mcp-plugin up to 0.4.1. This affects the function readdocument/listdocuments of the file server.py. Performing a manipulation of the argument docsdir/filepath results in path traversal. The attack is possible to be carried out remotely. The exploit has...

7.5CVSS6.7AI score0.00099EPSS
Exploits0References8Affected Software1
NVD
NVD
added 2026/04/27 10:16 p.m.2 views

CVE-2026-7159

A vulnerability was found in douinc mkdocs-mcp-plugin up to 0.4.1. This affects the function readdocument/listdocuments of the file server.py. Performing a manipulation of the argument docsdir/filepath results in path traversal. The attack is possible to be carried out remotely. The exploit has...

7.5CVSS0.00099EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/04/27 9:15 p.m.26 views

CVE-2026-7159 douinc mkdocs-mcp-plugin server.py list_documents path traversal

A vulnerability was found in douinc mkdocs-mcp-plugin up to 0.4.1. This affects the function readdocument/listdocuments of the file server.py. Performing a manipulation of the argument docsdir/filepath results in path traversal. The attack is possible to be carried out remotely. The exploit has...

7.5CVSS0.00099EPSS
Exploits0References6
CVE
CVE
added 2026/04/27 9:15 p.m.7 views

CVE-2026-7159

CVE-2026-7159 affects the douinc mkdocs-mcp-plugin (up to 0.4.1). The vulnerability exists in the file server.py functions read_document and list_documents , where manipulating the arguments docs_dir/file_path yields a path traversal . This allows a remote attacker to access files outside the int...

7.5CVSS7AI score0.00099EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/04/27 9:15 p.m.1 views

CVE-2026-7159

A vulnerability was found in douinc mkdocs-mcp-plugin up to 0.4.1. This affects the function readdocument/listdocuments of the file server.py. Performing a manipulation of the argument docsdir/filepath results in path traversal. The attack is possible to be carried out remotely. The exploit has...

7.5CVSS5.1AI score0.00099EPSS
Exploits0References6Affected Software1
EUVD
EUVD
added 2026/04/27 9:15 p.m.0 views

EUVD-2026-25926

A vulnerability was found in douinc mkdocs-mcp-plugin up to 0.4.1. This affects the function readdocument/listdocuments of the file server.py. Performing a manipulation of the argument docsdir/filepath results in path traversal. The attack is possible to be carried out remotely. The exploit has...

7.5CVSS7AI score0.00099EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.1 views

PT-2026-35532

A vulnerability was found in douinc mkdocs-mcp-plugin up to 0.4.1. This affects the function read document/list documents of the file server.py. Performing a manipulation of the argument docs dir/file path results in path traversal. The attack is possible to be carried out remotely. The exploit h...

7.5CVSS7AI score0.00099EPSS
Exploits0References7
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.3 views

MkDocs MCP Plugin 路径遍历漏洞

MkDocs MCP Plugin is an open-source document intelligent search and integration tool developed by Dou. Versions of MkDocs MCP Plugin prior to 0.4.1 contained a path traversal vulnerability. This vulnerability stemmed from improper handling of parameters docsdir and filepath in the...

7.5CVSS7.1AI score0.00099EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2025/11/28 12:0 a.m.1 views

Fedora: Security Advisory (FEDORA-2025-cb26113de5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.8AI score0.00116EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2025/11/28 12:0 a.m.3 views

Fedora: Security Advisory (FEDORA-2025-1b1bb708af)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.8AI score0.00116EPSS
Exploits0References5
Fedora
Fedora
added 2025/11/25 1:42 a.m.3 views

[SECURITY] Fedora 42 Update: python-mkdocs-include-markdown-plugin-7.2.0-1.fc42

This package provides an Mkdocs Markdown includer plugin...

6.5CVSS6.7AI score0.00116EPSS
Exploits0
Fedora
Fedora
added 2025/11/25 1:11 a.m.3 views

[SECURITY] Fedora 43 Update: python-mkdocs-include-markdown-plugin-7.2.0-1.fc43

This package provides an Mkdocs Markdown includer plugin...

6.5CVSS6.7AI score0.00116EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/11/25 12:0 a.m.0 views

Fedora 42 : python-mkdocs-include-markdown-plugin (2025-cb26113de5)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-cb26113de5 advisory. v7.2.0 New features - Add new argument order to sort multiple inclusions. v7.1.8 Bug fixes - Escape substitution placeholders to prevent malformed...

6.5CVSS5.6AI score0.00116EPSS
Exploits0References2
Rows per page
Query Builder