CVE-2025-5273
1 advisory.
npm/mcp-markdownify-server CVE-2025-5273: medium 6.5
Markdownify MCP Server allows attackers to read arbitrary files
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.0.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-22v8-p7h2-rj7p
- https://nvd.nist.gov/vuln/detail/CVE-2025-5273
- https://github.com/zcaceres/markdownify-mcp/commit/3a6b202d088ef7acb8be84bc09515f41a2b1a9df
- https://github.com/zcaceres/markdownify-mcp
- https://github.com/zcaceres/markdownify-mcp/blob/3667bd4765c0e49684ce22df268d02dd478a7f3b/src/Markdownify.ts#L94
- https://security.snyk.io/vuln/SNYK-JS-MCPMARKDOWNIFYSERVER-10249193
CVE-2025-5273 · published · modified · JSON