CyberSecBulletin

Mcp-markdownify-server vulnerabilities

We track 1 vulnerability in Mcp-markdownify-server products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 29, 2025.

1vulnerabilities
0critical
1high
0exploited
7.4average CVSS score

Latest Mcp-markdownify-server vulnerabilities

  • 7.4 High severity

    mcp-markdownify-server: Server-Side Request Forgery

    CVE-2025-5276Mcp-markdownify-server

    Versions of the package mcp-markdownify-server before 1.0.0 are vulnerable to Server-Side Request Forgery (SSRF) via the Markdownify.get() function. An attacker can craft a prompt that, once accessed by the MCP host, can invoke the webpage-to-markdown, bing-se