markdownify-mcp vulnerabilities

1 known vulnerability in markdownify-mcp from Zcaceres. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  markdownify-mcp: Improper Neutralization of Special Elements used in a Command

  CVE-2025-58358Sep 4, 2025Zcaceres

  Markdownify is a Model Context Protocol server for converting almost anything to Markdown. Versions below 0.0.2 contain a command injection vulnerability, caused by the unsanitized use of input parameters within a call to child_process.exec, enabling an attack