https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T16:17:27.446719+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-333385 EUVD-2026-333385 2026-10-06T16:17:27.451268+00:00 EUVD-2026-333385 https://cve.radiocsirt.org/vuln/fkie_cve-2026-14699 fkie_cve-2026-14699 2026-10-06T16:17:27.451306+00:00

A weakness has been identified in zcaceres markdownify-mcp up to 1.1.0. The affected element is the function assertPathAllowed of the file src/Markdownify.ts. Executing a manipulation can lead to symlink following. The attack can only be executed locally. The pull request to fix this issue awaits acceptance.

 https://cve.radiocsirt.org/vuln/ghsa-mf9r-r6pc-8fc6 GHSA-mf9r-r6pc-8fc6 2026-10-06T16:17:27.451339+00:00

A weakness has been identified in zcaceres markdownify-mcp up to 1.1.0. The affected element is the function assertPathAllowed of the file src/Markdownify.ts. Executing a manipulation can lead to symlink following. The attack can only be executed locally. The pull request to fix this issue awaits acceptance.