Description
Versions of the package mcp-markdownify-server before 1.0.0 are vulnerable to Files or Directories Accessible to External Parties via the get-markdown-file tool. An attacker can craft a prompt that, once accessed by the MCP host, will allow it to read arbitrary files from the host running the server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | mcp-markdownify-server | < 1.0.0 | 1.0.0 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | mcp-markdownify-server | <= 0.0.1 | — | GHSA-22v8-p7h2-rj7p |