Issues

• [audit N6] write_* family has empty default allowed_directories — discuss default-deny

  zcaceres/markdownify-mcp#139 · Filter by author ether-btc opened on Aug 29, 2026

• [audit N5] stderr from repomix is silently dropped (informational)

  zcaceres/markdownify-mcp#138 · Filter by author ether-btc opened on Aug 29, 2026

• [audit N4] inferExtensionFromUrl ignores ?query and #fragment

  zcaceres/markdownify-mcp#137 · Filter by author ether-btc opened on Aug 29, 2026

• [audit N3] saveToTempFile leaks temp files when markitdown throws

  zcaceres/markdownify-mcp#136 · Filter by author ether-btc opened on Aug 29, 2026

• Would you be open to a read-only MCP compatibility check?

  zcaceres/markdownify-mcp#124 · Filter by author KryptosAI opened on Jul 1, 2026

• MD_ALLOWED_PATHS sandbox bypassed via sibling-directory prefix matching

  zcaceres/markdownify-mcp#123 · Filter by author pzr21 opened on Jun 29, 2026

• CVE-2025-65512 appears to affect 1.1.0 via URL destination validation bypass

  zcaceres/markdownify-mcp#112 · Filter by author 3em0 opened on Jun 3, 2026

• Predictable temp file path in URL conversion can allow symlink overwrite/data leak

  zcaceres/markdownify-mcp#110 · Filter by author 3em0 opened on Jun 3, 2026

• Path allowlist can be bypassed through symlinked files

  zcaceres/markdownify-mcp#108 · Filter by author 3em0 opened on Jun 3, 2026

• Ontheia listed as compatible client — works great with markdownify-mcp

  zcaceres/markdownify-mcp#103 · Filter by author Ontheia opened on May 13, 2026

• webpage-to-markdown fails on Apple Silicon (ARM) — onnxruntime CPU warning + crash

  zcaceres/markdownify-mcp#95 · Filter by author paul-upfeat opened on Apr 10, 2026
  5