CVE-2025-59940

Published: Sep 29, 2025Modified: Jun 17, 2026Deferred

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Exploitability: 3.9 / Impact: 2.5

Source: security-advisories@github.com (Secondary)

Description

mkdocs-include-markdown-plugin is an Mkdocs Markdown includer plugin. In versions 7.1.7 and below, there is a vulnerability where unvalidated input can collide with substitution placeholders. This issue is fixed in version 7.1.8.

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

https://github.com/mondeja/mkdocs-include-markdown-plugin/commit/7466d67aa0de8ffbc427204ad2475fed07678915

Source: security-advisories@github.com

https://github.com/mondeja/mkdocs-include-markdown-plugin/issues/274

Source: security-advisories@github.com

https://github.com/mondeja/mkdocs-include-markdown-plugin/pull/277

Source: security-advisories@github.com

https://github.com/mondeja/mkdocs-include-markdown-plugin/security/advisories/GHSA-v39m-5m9j-m9w9

Source: security-advisories@github.com

Timeline

No history available yet.