~ / search / GHSA-22v8-p7h2-rj7p

GHSA-22v8-p7h2-rj7p

Markdownify MCP Server allows attackers to read arbitrary files

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-5273

Packages

EcosystemPackageAffectedFixed in
npm mcp-markdownify-server <= 0.0.1 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

All versions of the package mcp-markdownify-server are vulnerable to Files or Directories Accessible to External Parties via the get-markdown-file tool. An attacker can craft a prompt that, once accessed by the MCP host, will allow it to read arbitrary files from the host running the server.

References

External links from the advisory. They lead to third-party sites.