~ / search / GHSA-frq9-3hp2-xvxg

GHSA-frq9-3hp2-xvxg

Markdownify MCP Server allows Server-Side Request Forgery (SSRF) via the Markdownify.get() function

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-5276

Packages

EcosystemPackageAffectedFixed in
npm mcp-markdownify-server <= 0.0.1 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

All versions of the package mcp-markdownify-server are vulnerable to Server-Side Request Forgery (SSRF) via the Markdownify.get() function. An attacker can craft a prompt that, once accessed by the MCP host, can invoke the webpage-to-markdown, bing-search-to-markdown, and youtube-to-markdown tools to issue requests and read the responses to attacker-controlled URLs, potentially leaking sensitive information.

References

External links from the advisory. They lead to third-party sites.