pypi mkdocs-include-markdown-plugin vulnerabilities

Latest pypi mkdocs-include-markdown-plugin CVEs

Newest publication first

1. CVE-2025-59940 mkdocs-include-markdown-plugin susceptible to unvalidated input colliding with substitution placeholders

   Published 2025-09-29

   Medium·CVSS 6.5 EPSS 0.34%

   mkdocs-include-markdown-plugin is an Mkdocs Markdown includer plugin. In versions 7.1.7 and below, there is a vulnerability where unvalidated input can collide with substitution placeholders. This issue is fixed in version 7.1.8.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.