Approved changes feed: RSS · Atom

cpe:2.3:a:mkdocs:mkdocs:1.2.2:*:*:*:*:*:*:*

part: a version: 1.2.2 update: *

VendorMkdocs (70e74b16-8c88-515d-a6a3-501554cbba01)
ProductMkdocs (3738ec27-6f2b-5867-93ed-355fa0186477)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/python-mkdocs purl2cpe 2026-06-01 10:16:18.227746
pkg:deb/ubuntu/python-mkdocs purl2cpe 2026-06-01 10:16:18.227747
pkg:github/mkdocs/mkdocs purl2cpe 2026-06-01 10:16:18.227748
pkg:pypi/mkdocs purl2cpe 2026-06-01 10:16:18.227750
pkg:rpm/fedora/mkdocs purl2cpe 2026-06-01 10:16:18.227751
pkg:rpm/opensuse/python-mkdocs purl2cpe 2026-06-01 10:16:18.227752

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-40978 vulnerable 2026-06-08 05:35:19.404213 Details available
The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain :sensitive information. NOTE: the vendor has disputed this as described in https://github.com/mkdocs/mkdocs/issues/2601.] and https://github.com/nisdn/CVE-2021-40978/issues/1
Published: 2021-10-07T13:23:41.000Z
Updated: 2024-08-04T02:59:30.392Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.