CVE-2026-14702 | zcaceres markdownify-mcp up to 1.1.0 webpage-to-markdown src/Markdownify.ts saveToTempFile random values (Issue 110)

SecurityVulns
Yanac

A vulnerability was found in zcaceres markdownify-mcp up to 1.1.0. It has been classified as problematic. This impacts the function saveToTempFile of the file src/Markdownify.ts of the component webpage-to-markdown/youtube-to-markdown/bing-search-to-markdown. This manipulation causes insufficiently random values.

This vulnerability is tracked as CVE-2026-14702. The attack is restricted to local execution. Moreover, an exploit is present.

The pull request to fix this issue awaits acceptance.VulDB Recent EntriesRead More