SEC.co
Emergency

By weakness (CWE)

CWE-310: related vulnerabilities

CVEs classified under CWE-310. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

Known exploited (KEV)CriticalHighMediumAll recent
  • CVE-2026-14702LOW 2.5

    CVE-2026-14702 is a low-severity flaw in the markdownify-mcp library (versions up to 1.1.0) that weakens the randomness used to generate temporary file names. An attacker with local access to a system running this library could potentially predict or manipulate temporary file names, though doing so requires significant technical skill and knowledge of the affected code. The vulnerability does not enable remote exploitation and has minimal direct impact on system confidentiality or availability.