squidfunk mkdocs-material vulnerabilities

Latest squidfunk mkdocs-material CVEs

Newest publication first

1. CVE-2026-73295 Material for MkDocs: DOM XSS in search suggestions via query parameter

   Published 2026-08-12

   Medium·CVSS 5.4 EPSS 0.33%

   Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.