MEDIUM6.5
PYSEC-2026-1632
mkdocs-include-markdown-plugin susceptible to unvalidated input colliding with substitution placeholders
Quick fix
PYSEC-2026-1632 — mkdocs-include-markdown-plugin: upgrade to the fixed version with the command below.
pip install --upgrade 'mkdocs-include-markdown-plugin>=7.1.8'Details
### Impact CWE-20: Improper Input Validation Low impact
### Patches Patched in v7.1.8 (commit https://github.com/mondeja/mkdocs-include-markdown-plugin/commit/7466d67aa0de8ffbc427204ad2475fed07678915)
### Workarounds No
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI/mkdocs-include-markdown-plugin
Introduced in:
0Fixed in: 7.1.8Fix
pip install --upgrade 'mkdocs-include-markdown-plugin>=7.1.8'References
- https://github.com/mondeja/mkdocs-include-markdown-plugin/security/advisories/GHSA-v39m-5m9j-m9w9[WEB]
- https://nvd.nist.gov/vuln/detail/CVE-2025-59940[ADVISORY]
- https://github.com/mondeja/mkdocs-include-markdown-plugin/issues/274[WEB]
- https://github.com/mondeja/mkdocs-include-markdown-plugin/pull/277[WEB]
- https://github.com/mondeja/mkdocs-include-markdown-plugin/commit/7466d67aa0de8ffbc427204ad2475fed07678915[WEB]
- https://github.com/mondeja/mkdocs-include-markdown-plugin[PACKAGE]
- https://pypi.org/project/mkdocs-include-markdown-plugin[PACKAGE]
- https://github.com/advisories/GHSA-v39m-5m9j-m9w9[ADVISORY]