CVE-2025-59940Medium· 6.5▾ Sunlitmkdocs-include-markdown-plugin susceptible to unvalidated input colliding with substitution placeholders
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
0.3%
0.3% → 0.3%
CWE-20: Improper Input Validation Low impact
Patched in v7.1.8 (commit https://github.com/mondeja/mkdocs-include-markdown-plugin/commit/7466d67aa0de8ffbc427204ad2475fed07678915)
No
mkdocs-include-markdown-plugin < 7.1.8Upgrade to a patched release:
mkdocs-include-markdown-plugin 7.1.8