mcp-markdownify-server Path Traversal and Symlink Bypass via Lexical Check Flaw

github.com 2026-07-05查看中文 →

Security AdvisoryGHSA-108-zcaceres-markdownify-mcpMediumzcaceres

Affected:

mcp-markdownify-server 1.1.0

Referenced CVEs: CVE-2026-14699 · 3.3

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Snipe-IT Multiple Controllers BOLA Vulnerability Fix (Missing Authorization on selectlist) 2026-07-09 Fluent Bit v1.19 out_http plugin SSRF mitigation via strict host validation (allowed_hosts param) 2026-07-09 Fluentd out_http Plugin SSRF Fix: allowed_hosts Parameter Implementation 2026-07-09 Fluentd out_http SSRF Vulnerability (CVE-2026-44161) Advisory 2026-07-09 Fluentd v1.19.3 Security Update: Strict Host Header Validation and Buffer Limits 2026-07-09

Offline Archive

Offline screenshot & PDF are Pro-exclusive