https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 10:38:14 +0000 https://cve.radiocsirt.org/vuln/cve-2025-58358 <p><strong>Affected:</strong> zcaceres markdownify-mcp</p> <p>Markdownify is a Model Context Protocol server for converting almost anything to Markdown. Versions below 0.0.2 contain a command injection vulnerability, caused by the unsanitized use of input parameters within a call to child_process.exec, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remote code execution under the server process&#39;s privileges. The server constructs and executes shell commands using unvalidated user input directly within command-line strings. This introduces the possibility of shell metacharacter injection (|, &gt;, &amp;&amp;, etc.). This issue is fixed in version 0.0.2.</p> <p><strong>Affected:</strong> zcaceres markdownify-mcp</p> <p>Markdownify is a Model Context Protocol server for converting almost anything to Markdown. Versions below 0.0.2 contain a command injection vulnerability, caused by the unsanitized use of input parameters within a call to child_process.exec, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remote code execution under the server process&#39;s privileges. The server constructs and executes shell commands using unvalidated user input directly within command-line strings. This introduces the possibility of shell metacharacter injection (|, &gt;, &amp;&amp;, etc.). This issue is fixed in version 0.0.2.</p> https://cve.radiocsirt.org/vuln/cve-2025-58358