https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 22:15:46 +0000 https://cve.radiocsirt.org/vuln/cve-2026-7159 <p><strong>Affected:</strong> douinc mkdocs-mcp-plugin</p> <p>A vulnerability was found in douinc mkdocs-mcp-plugin up to 0.4.1. This affects the function read_document/list_documents of the file server.py. Performing a manipulation of the argument docs_dir/file_path results in path traversal. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor confirms, that the &#34;fix will be published within a few days.&#34;</p> <p><strong>Affected:</strong> douinc mkdocs-mcp-plugin</p> <p>A vulnerability was found in douinc mkdocs-mcp-plugin up to 0.4.1. This affects the function read_document/list_documents of the file server.py. Performing a manipulation of the argument docs_dir/file_path results in path traversal. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor confirms, that the &#34;fix will be published within a few days.&#34;</p> https://cve.radiocsirt.org/vuln/cve-2026-7159 https://cve.radiocsirt.org/vuln/ghsa-wfr3-hf93-qgg3 <p><strong>Affected:</strong> PyPI: mkdocs-mcp-plugin</p> <p>A vulnerability was found in douinc mkdocs-mcp-plugin up to 0.4.1. This affects the function read_document/list_documents of the file server.py. Performing a manipulation of the argument docs_dir/file_path results in path traversal. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor confirms, that the &#34;fix will be published within a few days.&#34;</p> <p><strong>Affected:</strong> PyPI: mkdocs-mcp-plugin</p> <p>A vulnerability was found in douinc mkdocs-mcp-plugin up to 0.4.1. This affects the function read_document/list_documents of the file server.py. Performing a manipulation of the argument docs_dir/file_path results in path traversal. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor confirms, that the &#34;fix will be published within a few days.&#34;</p> https://cve.radiocsirt.org/vuln/ghsa-wfr3-hf93-qgg3