Skip to content
OpenAdvisories

Vendor

zcaceres

3 known vulnerabilities.

Products

markdownify-mcp 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2025-58358

    Markdownify is vulnerable to command injection through pptx-to-markdown tool

    Markdownify is a Model Context Protocol server for converting almost anything to Markdown. Versions below 0.0.2 contain a command injection vulnerability, caused by the unsanitized use of input parameters within a call to child_process.exec, enabling an attac…

    zcaceres markdownify-mcp mcp-markdownify-server npm