Vendors / zcaceres Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now zcaceres records in CISA KEV No zcaceres vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 72
fetch-mcp v1.0.2 and before is vulnerable to Server-Side Request Forgery (SSRF) vulnerability, which allows attackers to bypass private IP validation and access internal network resources.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00448 · Published 2025-12-09 · No fix listed CWE-918
Priority HIGH 72
A Server-Side Request Forgery (SSRF) vulnerability was discovered in the webpage-to-markdown conversion feature of markdownify-mcp v0.0.2 and before.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00525 · Published 2025-12-10 · No fix listed CWE-918
Priority HIGH 68
Markdownify is a Model Context Protocol server for converting almost anything to Markdown.
CVSS 3.1 HIGH 7.5· Network · No auth · User interaction · EPSS 0.00965 · Published 2025-09-04 · Fixed in 0.0.2 CWE-77
Priority MEDIUM 44
A flaw has been found in zcaceres markdownify-mcp up to 1.1.0.
CVSS 4.0 LOW 2.0· Local · Low privileges · No interaction · EPSS 0.00144 · Published 2026-07-05 · No fix listed CWE-310
Priority LOW 21
A weakness has been identified in zcaceres markdownify-mcp up to 1.1.0.
CVSS 4.0 MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00174 · Published 2026-07-05 · No fix listed CWE-59
Open these records in search → All records by CVSS severity
0 3 1 1 0
