Skip to content
OpenAdvisories

Package · npm

mcp-markdownify-server

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2025-5273

    Markdownify MCP Server allows attackers to read arbitrary files

    Versions of the package mcp-markdownify-server before 1.0.0 are vulnerable to Files or Directories Accessible to External Parties via the get-markdown-file tool. An attacker can craft a prompt that, once accessed by the MCP host, will allow it to read arbitra…

    mcp-markdownify-server npm