MEDIUM6.5npm
GHSA-22v8-p7h2-rj7p· CVE-2025-5273Markdownify MCP Server allows attackers to read arbitrary files
Modified: 5/29/2025
package
npm/mcp-markdownify-server
pkg:npm/mcp-markdownify-server
HIGH7.5npm
GHSA-45qj-4xq3-3c45· CVE-2025-58358mcp-markdownify-server vulnerable to command injection in pptx-to-markdown tool
Modified: 9/4/2025
HIGH7.4npm
GHSA-frq9-3hp2-xvxg· CVE-2025-5276Markdownify MCP Server allows Server-Side Request Forgery (SSRF) via the Markdownify.get() function
Modified: 5/29/2025